[or-cvs] r16239: close some of the tags on the torbutton homepage, and make i (website/trunk/torbutton/en)
arma at seul.org
arma at seul.org
Tue Jul 29 22:11:31 UTC 2008
Author: arma
Date: 2008-07-29 18:11:30 -0400 (Tue, 29 Jul 2008)
New Revision: 16239
Modified:
website/trunk/torbutton/en/index.wml
Log:
close some of the tags on the torbutton homepage, and make it
slightly more conformant. i'm sure i still missed stuff.
Modified: website/trunk/torbutton/en/index.wml
===================================================================
--- website/trunk/torbutton/en/index.wml 2008-07-29 22:11:01 UTC (rev 16238)
+++ website/trunk/torbutton/en/index.wml 2008-07-29 22:11:30 UTC (rev 16239)
@@ -85,7 +85,7 @@
<strong>Current version:</strong><version-torbutton><br/>
<br/>
-<strong>Authors:</strong> Scott Squires & Mike Perry<br>
+<strong>Authors:</strong> Scott Squires & Mike Perry<br/>
<strong>Email:</strong> squires at freehaven dot net, mikeperry (o) fscked/org<br/>
<br/>
<strong>Install:</strong>
@@ -141,8 +141,8 @@
<a id="FAQ"></a><h2>FAQ</h2>
<strong>I can't click on links or hit reload after I toggle Tor! Why?</strong>
-<p>
+<p>
Due to <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=409737">Firefox
Bug 409737</a>, pages can still open popups and perform Javascript redirects
and history access after Tor has been toggled. These popups and redirects can
@@ -156,12 +156,11 @@
automatically, but you can hit enter in the URL bar, and it will begin
loading. Hitting enter in the URL bar will also reload the page without
clicking the reload button.
-
</p>
<strong>My browser is in some weird state where nothing works right!</strong>
-<p>
+<p>
Try to disable Tor by clicking on the button, and then open a new window. If
that doesn't fix the issue, go to the preferences page and hit 'Restore
Defaults'. This should reset the extension and Firefox to a known good
@@ -169,12 +168,11 @@
Firefox wedged, please file details at <a
href="https://bugs.torproject.org/flyspray/index.php?tasks=all&project=5">the
bug tracker</a>.
-
</p>
<strong>When I toggle Tor, my sites that use javascript stop working. Why?</strong>
-<p>
+<p>
Javascript can do things like wait until you have disabled Tor before trying
to contact its source site, thus revealing your IP address. As such, Torbutton
must disable Javascript, Meta-Refresh tags, and certain CSS behavior when Tor
@@ -185,31 +183,28 @@
page is broken. Unfortunately, the only thing you can do (and still remain
safe from having your IP address leak) is to reload the page when you toggle
Tor, or just ensure you do all your work in a page before switching tor state.
-
</p>
-
<strong>When I use Tor, Firefox is no longer filling in logins/search boxes
for me. Why?</strong>
-<p>
+<p>
Currently, this is tied to the "<b>Block history writes during Tor</b>"
setting. If you have enabled that setting, all formfill functionality (both
saving and reading) is disabled. If this bothers you, you can uncheck that
option, but both history and forms will be saved. To prevent history
disclosure attacks via Non-Tor usage, it is recommended you disable Non-Tor
history reads if you allow history writing during Tor.
-
</p>
-
<strong>Which Firefox extensions should I avoid using?</strong>
-<p>
+<p>
This is a tough one. There are thousands of Firefox extensions: making a
complete list of ones that are bad for anonymity is near impossible. However,
here are a few examples that should get you started as to what sorts of
behavior are dangerous.
+</p>
<ol>
<li>StumbleUpon, et al</li>
@@ -259,10 +254,7 @@
</ol>
-</p>
-
<strong>Which Firefox extensions do you recommend?</strong>
-<p>
<ol>
<li><a href="https://addons.mozilla.org/firefox/addon/953">RefControl</a></li>
Mentioned above, this extension allows more fine-grained referrer spoofing
@@ -276,11 +268,9 @@
from a document in the same origin domain as the cached element.
</ol>
-</p>
-
<strong>Are there any other issues I should be concerned about?</strong>
-<p>
+<p>
There is currently one known unfixed security issue with Torbutton: it is
possible to unmask the javascript hooks that wrap the Date object to conceal
your timezone in Firefox 2, and the timezone masking code does not work at all
@@ -297,18 +287,15 @@
<a
href="http://developer.apple.com/documentation/MacOSX/Conceptual/BPRuntimeConfig/Articles/EnvironmentVars.html#//apple_ref/doc/uid/20002093-BCIJIJBH">a
lot more complicated</a>, unfortunately.
-
</p>
<p>
-
In addition, RSS readers such as Firefox Livemarks can perform
periodic fetches. Due to <a
href="https://bugzilla.mozilla.org/show_bug.cgi?id=436250">Firefox Bug
436250</a>, there is no way to disable Livemark fetches during Tor. This can
be a problem if you have a lot of custom Livemark urls that can give away
information about your identity.
-
</p>
<h2>Description of Options</h2>
More information about the tor-commits
mailing list