tor-webwml.git

projects/en/torbutton-faq.wml    1) ## translation metadata

torbutton/en/torbutton-faq.wml   2) # Revision: $Revision$

projects/en/torbutton-faq.wml    3) # Translation-Priority: 3-low
projects/en/torbutton-faq.wml    4) 

torbutton/en/torbutton-faq.wml   5) #include "head.wmi" TITLE="Tor Project: Torbutton FAQ" CHARSET="UTF-8" ANNOUNCE_RSS="yes"

projects/en/torbutton-faq.wml    6) <div id="content" class="clearfix">
projects/en/torbutton-faq.wml    7) 	<div id="breadcrumbs">

projects/en/torbutton-faq.wml    8)     <a href="<page index>">Home &raquo; </a>

torbutton/en/torbutton-faq.wml   9)     <a href="<page torbutton/index>">Torbutton &raquo; </a>
torbutton/en/torbutton-faq.wml  10)     <a href="<page torbutton/torbutton-faq>">Torbutton FAQ</a>

projects/en/torbutton-faq.wml   11)   </div>
projects/en/torbutton-faq.wml   12) 	<div id="maincol">  
projects/en/torbutton-faq.wml   13)     <!-- PUT CONTENT AFTER THIS TAG -->
projects/en/torbutton-faq.wml   14)     
projects/en/torbutton-faq.wml   15)     <h2>Torbutton FAQ</h2>

torbutton/en/torbutton-faq.wml  16)     <hr>

projects/en/torbutton-faq.wml   17)     
projects/en/torbutton-faq.wml   18)     <h3>Questions</h3>

torbutton/en/torbutton-faq.wml  19)     <br>

projects/en/torbutton-faq.wml   20)     <ul>

torbutton/en/torbutton-faq.wml  21)     <li><a href="<page torbutton/torbutton-faq>#nojavascript">When I toggle Tor, my sites that use javascript stop working. Why?</a></li>
torbutton/en/torbutton-faq.wml  22)     <li><a href="<page torbutton/torbutton-faq>#noreloads">I can't click on links or hit reload after I toggle Tor! Why?</a></li>
torbutton/en/torbutton-faq.wml  23)     <li><a href="<page torbutton/torbutton-faq>#noflash">I can't view videos on YouTube and other flash-based sites. Why?</a></li>
torbutton/en/torbutton-faq.wml  24)     <li><a href="<page torbutton/torbutton-faq>#oldtorbutton">Torbutton sure seems to do a lot of things, some of which I find annoying. Can't I just use the old version?</a></li>
torbutton/en/torbutton-faq.wml  25)     <li><a href="<page torbutton/torbutton-faq>#weirdstate">My browser is in some weird state where nothing works right!</a></li>
torbutton/en/torbutton-faq.wml  26)     <li><a href="<page torbutton/torbutton-faq>#noautocomplete">When I use Tor, Firefox is no longer filling in logins/search boxes for me. Why?</a></li>
torbutton/en/torbutton-faq.wml  27)     <li><a href="<page torbutton/torbutton-faq>#thunderbird">What about Thunderbird support? I see a page, but it is the wrong version?</a></li>
torbutton/en/torbutton-faq.wml  28)     <li><a href="<page torbutton/torbutton-faq>#extensionconflicts">Which Firefox extensions should I avoid using?</a></li>
torbutton/en/torbutton-faq.wml  29)     <li><a href="<page torbutton/torbutton-faq>#recommendedextensions">Which Firefox extensions do you recommend?</a></li>
torbutton/en/torbutton-faq.wml  30)     <li><a href="<page torbutton/torbutton-faq>#securityissues">Are there any other issues I should be concerned about?</a></li>

projects/en/torbutton-faq.wml   31)     </ul>

torbutton/en/torbutton-faq.wml  32)     <br>

projects/en/torbutton-faq.wml   33)     
projects/en/torbutton-faq.wml   34)     <a id="nojavascript"></a>
projects/en/torbutton-faq.wml   35)     <strong><a class="anchor" href="#nojavascript">When I toggle Tor, my sites that use javascript stop working. Why?</a></strong>
projects/en/torbutton-faq.wml   36)     
projects/en/torbutton-faq.wml   37)     <p>
projects/en/torbutton-faq.wml   38)     Javascript can do things like wait until you have disabled Tor before trying
projects/en/torbutton-faq.wml   39)     to contact its source site, thus revealing your IP address. As such, Torbutton
projects/en/torbutton-faq.wml   40)     must disable Javascript, Meta-Refresh tags, and certain CSS behavior when Tor
projects/en/torbutton-faq.wml   41)     state changes from the state that was used to load a given page. These features
projects/en/torbutton-faq.wml   42)     are re-enabled when Torbutton goes back into the state that was used to load
projects/en/torbutton-faq.wml   43)     the page, but in some cases (particularly with Javascript and CSS) it is
projects/en/torbutton-faq.wml   44)     sometimes not possible to fully recover from the resulting errors, and the
projects/en/torbutton-faq.wml   45)     page is broken. Unfortunately, the only thing you can do (and still remain
projects/en/torbutton-faq.wml   46)     safe from having your IP address leak) is to reload the page when you toggle
projects/en/torbutton-faq.wml   47)     Tor, or just ensure you do all your work in a page before switching tor state.
projects/en/torbutton-faq.wml   48)     </p>
projects/en/torbutton-faq.wml   49)     
projects/en/torbutton-faq.wml   50)     <a id="noreloads"></a>
projects/en/torbutton-faq.wml   51)     <strong><a class="anchor" href="#noreloads">I can't click on links or hit reload after I toggle Tor! Why?</a></strong>
projects/en/torbutton-faq.wml   52)     
projects/en/torbutton-faq.wml   53)     <p>
projects/en/torbutton-faq.wml   54)     Due to <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=409737">Firefox
projects/en/torbutton-faq.wml   55)     Bug 409737</a>, pages can still open popups and perform Javascript redirects
projects/en/torbutton-faq.wml   56)     and history access after Tor has been toggled. These popups and redirects can
projects/en/torbutton-faq.wml   57)     be blocked, but unfortunately they are indistinguishable from normal user
projects/en/torbutton-faq.wml   58)     interactions with the page (such as clicking on links, opening them in new
projects/en/torbutton-faq.wml   59)     tabs/windows, or using the history buttons), and so those are blocked as a
projects/en/torbutton-faq.wml   60)     side effect. Once that Firefox bug is fixed, this degree of isolation will
projects/en/torbutton-faq.wml   61)     become optional (for people who do not want to accidentally click on links and
projects/en/torbutton-faq.wml   62)     give away information via referrers). A workaround is to right click on the
projects/en/torbutton-faq.wml   63)     link, and open it in a new tab or window. The tab or window won't load
projects/en/torbutton-faq.wml   64)     automatically, but you can hit enter in the URL bar, and it will begin
projects/en/torbutton-faq.wml   65)     loading. Hitting enter in the URL bar will also reload the page without
projects/en/torbutton-faq.wml   66)     clicking the reload button.
projects/en/torbutton-faq.wml   67)     </p>
projects/en/torbutton-faq.wml   68)     
projects/en/torbutton-faq.wml   69)     <a id="noflash"></a>
projects/en/torbutton-faq.wml   70)     <strong><a class="anchor" href="#noflash">I can't view videos on YouTube and
projects/en/torbutton-faq.wml   71)     other Flash-based sites. Why?</a></strong>
projects/en/torbutton-faq.wml   72)     
projects/en/torbutton-faq.wml   73)     <p>
projects/en/torbutton-faq.wml   74)     YouTube and similar sites require third party browser plugins such as Flash.
projects/en/torbutton-faq.wml   75)     Plugins operate independently from Firefox and can perform
projects/en/torbutton-faq.wml   76)     activity on your computer that ruins your anonymity. This includes
projects/en/torbutton-faq.wml   77)     but is not limited to: <a href="http://decloak.net">completely disregarding
projects/en/torbutton-faq.wml   78)     proxy settings</a>, querying your <a
projects/en/torbutton-faq.wml   79)     href="http://forums.sun.com/thread.jspa?threadID=5162138&amp;messageID=9618376">local
projects/en/torbutton-faq.wml   80)     IP address</a>, and <a
projects/en/torbutton-faq.wml   81)     href="http://epic.org/privacy/cookies/flash.html">storing their own

torbutton/en/torbutton-faq.wml  82)     cookies</a>. It is possible to use a LiveCD solution such as
torbutton/en/torbutton-faq.wml  83)     or <a href="https://amnesia.boum.org/">The (Amnesic) Incognito Live System</a> that creates a

projects/en/torbutton-faq.wml   84)     secure, transparent proxy to protect you from proxy bypass, however issues
projects/en/torbutton-faq.wml   85)     with local IP address discovery and Flash cookies still remain.  </p>
projects/en/torbutton-faq.wml   86)     
projects/en/torbutton-faq.wml   87)     <p>
projects/en/torbutton-faq.wml   88)     If you are not concerned about being tracked by these sites (and sites that
projects/en/torbutton-faq.wml   89)     try to unmask you by pretending to be them), and are unconcerned about your
projects/en/torbutton-faq.wml   90)     local censors potentially noticing you visit them, you can enable plugins by
projects/en/torbutton-faq.wml   91)     going into the Torbutton Preferences-&gt;Security Settings-&gt;Dynamic Content
projects/en/torbutton-faq.wml   92)     tab and unchecking "Disable plugins during Tor usage" box. If you do this

torbutton/en/torbutton-faq.wml  93)     without The (Amnesic) Incognito Live System or appropriate firewall
torbutton/en/torbutton-faq.wml  94)     rules, we strongly suggest you at least use <a

projects/en/torbutton-faq.wml   95)     href="https://addons.mozilla.org/en-US/firefox/addon/722">NoScript</a> to <a
projects/en/torbutton-faq.wml   96)     href="http://noscript.net/features#contentblocking">block plugins</a>. You do
projects/en/torbutton-faq.wml   97)     not need to use the NoScript per-domain permissions if you check the <b>Apply
projects/en/torbutton-faq.wml   98)     these restrictions to trusted sites too</b> option under the NoScript Plugins
projects/en/torbutton-faq.wml   99)     preference tab. In fact, with this setting you can even have NoScript allow
projects/en/torbutton-faq.wml  100)     Javascript globally, but still block all plugins until you click on their
projects/en/torbutton-faq.wml  101)     placeholders in a page. We also recommend <a
projects/en/torbutton-faq.wml  102)     href="https://addons.mozilla.org/en-US/firefox/addon/6623">Better Privacy</a>
projects/en/torbutton-faq.wml  103)     in this case to help you clear your Flash cookies.
projects/en/torbutton-faq.wml  104)     </p>

torbutton/en/torbutton-faq.wml 105) 
torbutton/en/torbutton-faq.wml 106)     <p> The Tor Browser Bundle does not work with Flash or other plugins
torbutton/en/torbutton-faq.wml 107) by design.  If you wish to run these plugins over Tor, you need to
torbutton/en/torbutton-faq.wml 108) install Tor and configure your own instance of Firefox.</p>

projects/en/torbutton-faq.wml  109)     
projects/en/torbutton-faq.wml  110)     <a id="oldtorbutton"></a>
projects/en/torbutton-faq.wml  111)     <strong><a class="anchor" href="#oldtorbutton">Torbutton sure seems to do a lot of things, some of which I find
projects/en/torbutton-faq.wml  112)     annoying. Can't I just use the old version?</a></strong>
projects/en/torbutton-faq.wml  113)     
projects/en/torbutton-faq.wml  114)     <p>
projects/en/torbutton-faq.wml  115)     
projects/en/torbutton-faq.wml  116)     <b>No.</b> Use of the old version, or any other vanilla proxy changer
projects/en/torbutton-faq.wml  117)     (including FoxyProxy -- see below) without Torbutton is actively discouraged.
projects/en/torbutton-faq.wml  118)     Seriously. Using a vanilla proxy switcher by itself is so insecure that you are
projects/en/torbutton-faq.wml  119)     not only just wasting your time, you are also actually endangering yourself.
projects/en/torbutton-faq.wml  120)     <b>Simply do not use Tor</b> and you will have the same (and in some cases,
projects/en/torbutton-faq.wml  121)     better) security.  For more information on the types of attacks you are exposed
projects/en/torbutton-faq.wml  122)     to with a "homegrown" solution, please see <a

torbutton/en/torbutton-faq.wml 123)     href="design/index.html.en#adversary">The Torbutton

projects/en/torbutton-faq.wml  124)     Adversary Model</a>, in particular the <a

torbutton/en/torbutton-faq.wml 125)     href="design/index.html.en#attacks">Adversary

projects/en/torbutton-faq.wml  126)     Capabilities - Attacks</a> subsection. If there are any specific Torbutton
projects/en/torbutton-faq.wml  127)     behaviors that you do not like, please file a bug on <a

torbutton/en/torbutton-faq.wml 128)     href="https://trac.torproject.org/projects/tor/report/14">the

projects/en/torbutton-faq.wml  129)     bug tracker.</a> Most of Torbutton's security features can also be disabled via
projects/en/torbutton-faq.wml  130)     its preferences, if you think you have your own protection for those specific
projects/en/torbutton-faq.wml  131)     cases.
projects/en/torbutton-faq.wml  132)     
projects/en/torbutton-faq.wml  133)     </p>
projects/en/torbutton-faq.wml  134)     
projects/en/torbutton-faq.wml  135)     <a id="weirdstate"></a>
projects/en/torbutton-faq.wml  136)     <strong><a class="anchor" href="#weirdstate">My browser is in some weird state where nothing works right!</a></strong>
projects/en/torbutton-faq.wml  137)     
projects/en/torbutton-faq.wml  138)     <p>
projects/en/torbutton-faq.wml  139)     Try to disable Tor by clicking on the button, and then open a new window. If
projects/en/torbutton-faq.wml  140)     that doesn't fix the issue, go to the preferences page and hit 'Restore
projects/en/torbutton-faq.wml  141)     Defaults'. This should reset the extension and Firefox to a known good
projects/en/torbutton-faq.wml  142)     configuration.  If you can manage to reproduce whatever issue gets your
projects/en/torbutton-faq.wml  143)     Firefox wedged, please file details at <a

torbutton/en/torbutton-faq.wml 144)     href="https://trac.torproject.org/projects/tor/report/14">the bug tracker</a>.

projects/en/torbutton-faq.wml  145)     </p>
projects/en/torbutton-faq.wml  146)     
projects/en/torbutton-faq.wml  147)     <a id="noautocomplete"></a>
projects/en/torbutton-faq.wml  148)     <strong><a class="anchor" href="#noautocomplete">When I use Tor, Firefox is no longer filling in logins/search boxes
projects/en/torbutton-faq.wml  149)     for me. Why?</a></strong>
projects/en/torbutton-faq.wml  150)     
projects/en/torbutton-faq.wml  151)     <p>
projects/en/torbutton-faq.wml  152)     Currently, this is tied to the "<b>Block history writes during Tor</b>"
projects/en/torbutton-faq.wml  153)     setting. If you have enabled that setting, all formfill functionality (both
projects/en/torbutton-faq.wml  154)     saving and reading) is disabled. If this bothers you, you can uncheck that
projects/en/torbutton-faq.wml  155)     option, but both history and forms will be saved. To prevent history
projects/en/torbutton-faq.wml  156)     disclosure attacks via Non-Tor usage, it is recommended you disable Non-Tor
projects/en/torbutton-faq.wml  157)     history reads if you allow history writing during Tor.
projects/en/torbutton-faq.wml  158)     </p>
projects/en/torbutton-faq.wml  159)     
projects/en/torbutton-faq.wml  160)     <a id="thunderbird"></a>
projects/en/torbutton-faq.wml  161)     <strong><a class="anchor" href="#thunderbird">What about Thunderbird support? I see a page, but it is the wrong
projects/en/torbutton-faq.wml  162)     version?</a></strong>
projects/en/torbutton-faq.wml  163)     
projects/en/torbutton-faq.wml  164)     <p>
projects/en/torbutton-faq.wml  165)     Torbutton used to support basic proxy switching on Thunderbird back in the 1.0
projects/en/torbutton-faq.wml  166)     days, but that support has been removed because it has not been analyzed for
projects/en/torbutton-faq.wml  167)     security. My developer tools page on addons.mozilla.org clearly lists Firefox
projects/en/torbutton-faq.wml  168)     support only, so I don't know why they didn't delete that Thunderbird listing.
projects/en/torbutton-faq.wml  169)     I am not a Thunderbird user and unfortunately, I don't have time to analyze
projects/en/torbutton-faq.wml  170)     the security issues involved with toggling proxy settings in that app. It
projects/en/torbutton-faq.wml  171)     likely suffers from similar (but not identical) state and proxy leak issues
projects/en/torbutton-faq.wml  172)     with html mail, embedded images, javascript, plugins and automatic network
projects/en/torbutton-faq.wml  173)     access. My recommendation is to create a completely separate Thunderbird
projects/en/torbutton-faq.wml  174)     profile for your Tor accounts and use that instead of trying to toggle proxy
projects/en/torbutton-faq.wml  175)     settings. But if you really like to roll fast and loose with your IP, you
projects/en/torbutton-faq.wml  176)     could try another proxy switcher like ProxyButton, SwitchProxy or FoxyProxy
projects/en/torbutton-faq.wml  177)     (if any of those happen to support thunderbird).
projects/en/torbutton-faq.wml  178)     </p>
projects/en/torbutton-faq.wml  179)     
projects/en/torbutton-faq.wml  180)     <a id="extensionconflicts"></a>
projects/en/torbutton-faq.wml  181)     <strong><a class="anchor" href="#extensionconflicts">Which Firefox extensions should I avoid using?</a></strong>
projects/en/torbutton-faq.wml  182)     
projects/en/torbutton-faq.wml  183)     <p>
projects/en/torbutton-faq.wml  184)     This is a tough one. There are thousands of Firefox extensions: making a
projects/en/torbutton-faq.wml  185)     complete list of ones that are bad for anonymity is near impossible. However,
projects/en/torbutton-faq.wml  186)     here are a few examples that should get you started as to what sorts of
projects/en/torbutton-faq.wml  187)     behavior are dangerous.
projects/en/torbutton-faq.wml  188)     </p>
projects/en/torbutton-faq.wml  189)     
projects/en/torbutton-faq.wml  190)     <ol>
projects/en/torbutton-faq.wml  191)      <li>StumbleUpon, et al
projects/en/torbutton-faq.wml  192)      <p>
projects/en/torbutton-faq.wml  193)      These extensions will send all sorts of information about the websites you
projects/en/torbutton-faq.wml  194)      visit to the stumbleupon servers, and correlate this information with a
projects/en/torbutton-faq.wml  195)      unique identifier. This is obviously terrible for your anonymity.
projects/en/torbutton-faq.wml  196)      More generally, any sort of extension that requires registration, or even
projects/en/torbutton-faq.wml  197)      extensions that provide information about websites you visit should be
projects/en/torbutton-faq.wml  198)      suspect.
projects/en/torbutton-faq.wml  199)      </p></li>
projects/en/torbutton-faq.wml  200)      <li>FoxyProxy
projects/en/torbutton-faq.wml  201)     <p>
projects/en/torbutton-faq.wml  202)     While FoxyProxy is a nice idea in theory, in practice it is impossible to
projects/en/torbutton-faq.wml  203)     configure securely for Tor usage without Torbutton. Like all vanilla third
projects/en/torbutton-faq.wml  204)     party proxy plugins, the main risks are <a
projects/en/torbutton-faq.wml  205)     href="http://www.metasploit.com/research/projects/decloak/">plugin leakage</a>
projects/en/torbutton-faq.wml  206)     and <a href="http://ha.ckers.org/weird/CSS-history.cgi">history
projects/en/torbutton-faq.wml  207)     disclosure</a>, followed closely by cookie theft by exit nodes and tracking by

torbutton/en/torbutton-faq.wml 208)     adservers (see the <a href="design/index.html.en#adversary">Torbutton Adversary

projects/en/torbutton-faq.wml  209)     Model</a> for more information). However, with Torbutton installed in tandem
projects/en/torbutton-faq.wml  210)     and always enabled, it is possible to configure FoxyProxy securely (though it
projects/en/torbutton-faq.wml  211)     is tricky). Since FoxyProxy's 'Patterns' mode only applies to specific urls,
projects/en/torbutton-faq.wml  212)     and not to an entire tab, setting FoxyProxy to only send specific sites
projects/en/torbutton-faq.wml  213)     through Tor will still allow adservers (whose hosts don't match your filters) to learn your real IP. Worse, when
projects/en/torbutton-faq.wml  214)     sites use offsite logging services such as Google Analytics, you will
projects/en/torbutton-faq.wml  215)     still end up in their logs with your real IP. Malicious exit nodes can also
projects/en/torbutton-faq.wml  216)     cooperate with sites to inject images into pages that bypass your filters.
projects/en/torbutton-faq.wml  217)     Setting FoxyProxy to only send certain URLs via Non-Tor is much more secure in
projects/en/torbutton-faq.wml  218)     this regard, but be very careful with the filters you allow. For example,
projects/en/torbutton-faq.wml  219)     something as simple as allowing *google* to go via Non-Tor will still cause you to end up
projects/en/torbutton-faq.wml  220)     in all the logs of all websites that use Google Analytics!  See
projects/en/torbutton-faq.wml  221)     <a href="http://foxyproxy.mozdev.org/faq.html#privacy-01">this question</a> on
projects/en/torbutton-faq.wml  222)     the FoxyProxy FAQ for more information.
projects/en/torbutton-faq.wml  223)      </p></li>
projects/en/torbutton-faq.wml  224)     </ol>
projects/en/torbutton-faq.wml  225)     
projects/en/torbutton-faq.wml  226)     <a id="recommendedextensions"></a>
projects/en/torbutton-faq.wml  227)     <strong><a class="anchor" href="#recommendedextensions">Which Firefox extensions do you recommend?</a></strong>
projects/en/torbutton-faq.wml  228)     <ol>
projects/en/torbutton-faq.wml  229)      <li><a href="https://addons.mozilla.org/firefox/addon/953">RefControl</a>
projects/en/torbutton-faq.wml  230)     	<p>
projects/en/torbutton-faq.wml  231)     Mentioned above, this extension allows more fine-grained referrer spoofing
projects/en/torbutton-faq.wml  232)     than Torbutton currently provides. It should break less sites than Torbutton's
projects/en/torbutton-faq.wml  233)     referrer spoofing option.</p></li>
projects/en/torbutton-faq.wml  234)     
projects/en/torbutton-faq.wml  235)      <li><a href="https://addons.mozilla.org/firefox/addon/1474">SafeCache</a>
projects/en/torbutton-faq.wml  236)     <p>
projects/en/torbutton-faq.wml  237)     If you use Tor excessively, and rarely disable it, you probably want to
projects/en/torbutton-faq.wml  238)     install this extension to minimize the ability of sites to store long term
projects/en/torbutton-faq.wml  239)     identifiers in your cache. This extension applies same origin policy to the
projects/en/torbutton-faq.wml  240)     cache, so that elements are retrieved from the cache only if they are fetched
projects/en/torbutton-faq.wml  241)     from a document in the same origin domain as the cached element.
projects/en/torbutton-faq.wml  242)     </p></li>
projects/en/torbutton-faq.wml  243)     
projects/en/torbutton-faq.wml  244)      <li><a href="https://addons.mozilla.org/en-US/firefox/addon/6623">Better
projects/en/torbutton-faq.wml  245)     Privacy</a>
projects/en/torbutton-faq.wml  246)      <p>
projects/en/torbutton-faq.wml  247)     
projects/en/torbutton-faq.wml  248)     Better Privacy is an excellent extension that protects you from cookies used
projects/en/torbutton-faq.wml  249)     by Flash applications, which often persist forever and are not clearable via
projects/en/torbutton-faq.wml  250)     normal Firefox "Private Data" clearing. Flash and all other plugins are
projects/en/torbutton-faq.wml  251)     disabled by Torbutton by default, but if you are interested in privacy, you
projects/en/torbutton-faq.wml  252)     may want this extension to allow you to inspect and automatically clear your
projects/en/torbutton-faq.wml  253)     Flash cookies for your Non-Tor usage.
projects/en/torbutton-faq.wml  254)     
projects/en/torbutton-faq.wml  255)      </p>
projects/en/torbutton-faq.wml  256)      </li>
projects/en/torbutton-faq.wml  257)      <li><a href="https://addons.mozilla.org/firefox/addon/1865">AdBlock Plus</a>
projects/en/torbutton-faq.wml  258)      <p>
projects/en/torbutton-faq.wml  259)     
projects/en/torbutton-faq.wml  260)     AdBlock Plus is an excellent addon for removing annoying, privacy-invading,
projects/en/torbutton-faq.wml  261)     and <a
projects/en/torbutton-faq.wml  262)     href="http://www.wired.com/techbiz/media/news/2007/11/doubleclick">malware-distributing</a>
projects/en/torbutton-faq.wml  263)     advertisements from the web. It provides
projects/en/torbutton-faq.wml  264)     <a href="http://adblockplus.org/en/subscriptions">subscriptions</a> that are
projects/en/torbutton-faq.wml  265)     continually updated to catch the latest efforts of ad networks to circumvent
projects/en/torbutton-faq.wml  266)     these filters. I recommend the EasyPrivacy+EasyList combination filter
projects/en/torbutton-faq.wml  267)     subscription in the Miscellaneous section of the subscriptions page.
projects/en/torbutton-faq.wml  268)     
projects/en/torbutton-faq.wml  269)      </p>
projects/en/torbutton-faq.wml  270)     </li> 
projects/en/torbutton-faq.wml  271)     <li><a href="https://addons.mozilla.org/firefox/addon/82">Cookie Culler</a>
projects/en/torbutton-faq.wml  272)      <p>
projects/en/torbutton-faq.wml  273)     
projects/en/torbutton-faq.wml  274)     Cookie Culler is a handy extension to give quick access to the cookie manager
projects/en/torbutton-faq.wml  275)     in Firefox. It also provides the ability to protect certain cookies from
projects/en/torbutton-faq.wml  276)     deletion, but unfortunately, this behavior does not integrate well with Torbutton. Kory Kirk is working on addressing this for this Google Summer of Code project for 2009.
projects/en/torbutton-faq.wml  277)     
projects/en/torbutton-faq.wml  278)      </p>
projects/en/torbutton-faq.wml  279)      </li>
projects/en/torbutton-faq.wml  280)     
projects/en/torbutton-faq.wml  281)      <li><a href="https://addons.mozilla.org/en-US/firefox/addon/722">NoScript</a>
projects/en/torbutton-faq.wml  282)      <p>
projects/en/torbutton-faq.wml  283)      Torbutton currently mitigates all known anonymity issues with Javascript.
projects/en/torbutton-faq.wml  284)      However, if you are concerned about Javascript exploits against your browser
projects/en/torbutton-faq.wml  285)      or against websites you are logged in to, you may want to use NoScript. It
projects/en/torbutton-faq.wml  286)      provides the ability to allow Javascript only for particular websites
projects/en/torbutton-faq.wml  287)      and also provides mechanisms to force HTTPS urls for sites with
projects/en/torbutton-faq.wml  288)     <a href="http://fscked.org/category/tags/insecurecookies">insecure
projects/en/torbutton-faq.wml  289)      cookies</a>.<br>
projects/en/torbutton-faq.wml  290)     
projects/en/torbutton-faq.wml  291)      It can be difficult to configure such that the most sites will work
projects/en/torbutton-faq.wml  292)      properly though. In particular, you want to make sure you do not remove
projects/en/torbutton-faq.wml  293)      the Javascript whitelist for
projects/en/torbutton-faq.wml  294)      addons.mozilla.org, as extensions are downloaded via http and verified by
projects/en/torbutton-faq.wml  295)      javascript from the https page.
projects/en/torbutton-faq.wml  296)     
projects/en/torbutton-faq.wml  297)      </p></li>
projects/en/torbutton-faq.wml  298)      <li><a href="https://addons.mozilla.org/en-US/firefox/addon/9727/">Request
projects/en/torbutton-faq.wml  299)     Policy</a>
projects/en/torbutton-faq.wml  300)      <p>
projects/en/torbutton-faq.wml  301)     
projects/en/torbutton-faq.wml  302)     Request Policy is similar to NoScript in that it requires that you configure
projects/en/torbutton-faq.wml  303)     which sites are allowed to load content from other domains. It can be very
projects/en/torbutton-faq.wml  304)     difficult for novice users to configure properly, but it does provide a good
projects/en/torbutton-faq.wml  305)     deal of protection against ads, injected content, and cross-site request
projects/en/torbutton-faq.wml  306)     forgery attacks.
projects/en/torbutton-faq.wml  307)     
projects/en/torbutton-faq.wml  308)      </p>
projects/en/torbutton-faq.wml  309)      </li>
projects/en/torbutton-faq.wml  310)     
projects/en/torbutton-faq.wml  311)     </ol>
projects/en/torbutton-faq.wml  312)     
projects/en/torbutton-faq.wml  313)     <a id="securityissues"></a>
projects/en/torbutton-faq.wml  314)     <strong><a class="anchor" href="#securityissues">Are there any other issues I should be concerned about?</a></strong>
projects/en/torbutton-faq.wml  315)     
projects/en/torbutton-faq.wml  316)     <p>
projects/en/torbutton-faq.wml  317)     There are a few known security issues with Torbutton (all of which are due to

torbutton/en/torbutton-faq.wml 318)     <a href="design/index.html.en#FirefoxBugs">unfixed