Scroogle and Tor
Mike Perry
mikeperry at fscked.org
Tue Feb 15 05:20:21 UTC 2011
Thus spake Robert Ransom (rransom.8774 at gmail.com):
> On Mon, 14 Feb 2011 20:19:50 -0800
> Mike Perry <mikeperry at fscked.org> wrote:
>
> > 2. Storing identifiers in the cache
> >
> > http://crypto.stanford.edu/sameorigin/safecachetest.html has some PoC
> > of this. Torbutton protects against long-term cache identifiers, but
> > for performance reasons the memory cache is enabled by default, so you
> > could use this to differentiate crawlers who do not properly obey all
> > brower caching sematics. Caching is actually pretty darn hard to get
> > right, so there's probably quite a bit more room here than just plain
> > identifiers.
>
> Polipo monkey-wrenches Torbutton's protection against long-term cache
> identifiers.
I hate polipo. I've been trying ignore it until it fucking dies. But
it's like a zombie that just won't stop gnawing on our brains. Worse,
a crack smoking zombie that got us all addicted to it through second
hand crack smoke. Or something. But hey, it's better than privoxy.
Maybe?
I was under the impression that we hacked it to also be memory-only,
though. But you're right, if I toggle Torbutton to clear my cache,
Polipo's is still there...
--
Mike Perry
Mad Computer Scientist
fscked.org evil labs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20110214/b2e43d25/attachment.pgp>
More information about the tor-talk
mailing list