[tor-talk] Adblock Plus and Ghostery should be included in Tor bundle

[x]

Agreed about the dangers of add-ons and info here

https://www.torproject.org/projects/torbrowser/design/
"The Design and Implementation of the Tor Browser [DRAFT]"

not sure if maintaining ghostery or adblock via Tor is worth the trouble as they might/might not improve the user experience but they don't from my standpoint push forward the design and implementation goals.  I would say a first consideration might be to address mitm attacks.

We have seen major problems with certificate authorities and most governments can write certificates.  Tor has a vulnerability with mitm attacks. (everyone does)  A migration towards a system like convergence (convergence.io) with a decentralized trust of SSL would probably be a good thing.  Currently there are some conflicts between Tor and the convergence add-on working together but if this could be addressed or the process was internalized and if Tor was shipped with a large number of notaries (or approach this in the same way as bridges...not sure on this) then you would have a pretty complete solution.

my 2 cents

E75A7CF4


On 2/12/2012 10:29 AM, unknown wrote:
> On Sun, 12 Feb 2012 17:00:59 +0100
> Martin Hubbard <Martin.Hubbard at gmx.us> wrote:
>
>> RefControl set to spoof referrer as host webroot is also useful, I think.
>> ----- Original Message -----
>> From: Brian Franklin
>> Sent: 02/12/12 09:53 AM
>> To: tor-talk at lists.torproject.org
>> Subject: [tor-talk] Adblock Plus and Ghostery should be included in Tor bundle
>>
>>  Adblock Plus and Ghostery should be included in Tor bundle Two reasons 1. 
> Exit nodes and sites can make a traffic analysis 
> based on unique profiles of banned urls.
>
> Malicious exits nodes even can inject invisible blocked patterns
> to make this analysis more active.
>
> Adblock and other similar user-tunable plugins should be avoided.
>
> Check https://www.torproject.org/projects/torbrowser/design/
> "The Design and Implementation of the Tor Browser [DRAFT]"
> _______________________________________________
> tor-talk mailing list
> tor-talk at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>