[tor-talk] HTML5 video and Tor anonymity.

[adrelanos]

David Vorick:
> I don't know what I'm talking about, but here goes:
> 
> If you were to put flash in a "sandbox" that had a fake IP address, might
> that make the sandbox incompatible with the tor network?

That depends on the sandbox. If it does it right, it can be fully NATed
and enforce proxy obedience as well.

> When you are
> communicating, even over the tor network, your IP address is critical so
> that servers on the other end know where to send messages. That means that
> at the very least you have to know your own IP address. If the flash
> sandbox had a false address, the network might reject communication
> altogether, or it might simply be unable to return the messages to the
> right spot.
> 
> Am I incorrect?

No. When using an Isolating Proxy, the Workstation doesn't know it's own
external IP address and can't find out (without breaking out using
exploits). The Gateway can find out it's own external IP address and
runs Tor. See:
https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy

> 
> On Wed, May 1, 2013 at 2:16 PM, Andrew F <andrewfriedman101 at gmail.com>wrote:
> 
>> Thanks noel,
>> Is there a way to "sandbox"  flash and make it safe?
>>
>>
>>
>> On Wed, May 1, 2013 at 5:05 PM, Noel David Torres Taño <
>> envite at rolamasao.org
>>> wrote:
>>
>>> On Martes, 30 de abril de 2013 19:00:20 andrew wrote:
>>>> Leo,
>>>> Would be possible to run flash video in a VM to isolate it?
>>>
>>> Hi Andrew
>>>
>>> Issue is not isolation from other processes, issue is that the Flash
>> player
>>> might communicate your IP and other data to some third party (who may be
>>> the
>>> video host service or not)
>>>
>>> Regards
>>>
>>> Noel
>>> er Envite
>>> -------------------------
>>> A: Because it breaks the logical flow of discussion.
>>> Q: Why is top posting bad?
>>>
>>> _______________________________________________
>>> tor-talk mailing list
>>> tor-talk at lists.torproject.org
>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>>>
>>>
>> _______________________________________________
>> tor-talk mailing list
>> tor-talk at lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>>
> _______________________________________________
> tor-talk mailing list
> tor-talk at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>