first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 1) ## translation metadata
projects/en/torbutton-faq.wml 2) # Revision: $Revision: 0 $
projects/en/torbutton-faq.wml 3) # Translation-Priority: 3-low
projects/en/torbutton-faq.wml 4)
projects/en/torbutton-faq.wml 5) #include "head.wmi" TITLE="Tor Project: Projects Overview" CHARSET="UTF-8" ANNOUNCE_RSS="yes"
projects/en/torbutton-faq.wml 6) <div id="content" class="clearfix">
projects/en/torbutton-faq.wml 7) <div id="breadcrumbs">
|
|
change all of the breadcrum...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 8) <a href="<page index>">Home » </a>
|
|
fix links to torbutton sect...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 9) <a href="<page torbutton/index>">Torbutton » </a>
torbutton/en/torbutton-faq.wml 10) <a href="<page torbutton/torbutton-faq>">Torbutton FAQ</a>
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 11) </div>
projects/en/torbutton-faq.wml 12) <div id="maincol">
projects/en/torbutton-faq.wml 13) <!-- PUT CONTENT AFTER THIS TAG -->
projects/en/torbutton-faq.wml 14)
projects/en/torbutton-faq.wml 15) <h2>Torbutton FAQ</h2>
|
We decided to go with HTML...
Sebastian Hahn authored 14 years ago
|
torbutton/en/torbutton-faq.wml 16) <hr>
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 17)
projects/en/torbutton-faq.wml 18) <h3>Questions</h3>
|
|
We decided to go with HTML...
Sebastian Hahn authored 14 years ago
|
torbutton/en/torbutton-faq.wml 19) <br>
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 20) <ul>
|
|
move torbutton back to a ma...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 21) <li><a href="<page torbutton/torbutton-faq>#nojavascript">When I toggle Tor, my sites that use javascript stop working. Why?</a></li>
torbutton/en/torbutton-faq.wml 22) <li><a href="<page torbutton/torbutton-faq>#noreloads">I can't click on links or hit reload after I toggle Tor! Why?</a></li>
torbutton/en/torbutton-faq.wml 23) <li><a href="<page torbutton/torbutton-faq>#noflash">I can't view videos on YouTube and other flash-based sites. Why?</a></li>
torbutton/en/torbutton-faq.wml 24) <li><a href="<page torbutton/torbutton-faq>#oldtorbutton">Torbutton sure seems to do a lot of things, some of which I find annoying. Can't I just use the old version?</a></li>
torbutton/en/torbutton-faq.wml 25) <li><a href="<page torbutton/torbutton-faq>#weirdstate">My browser is in some weird state where nothing works right!</a></li>
torbutton/en/torbutton-faq.wml 26) <li><a href="<page torbutton/torbutton-faq>#noautocomplete">When I use Tor, Firefox is no longer filling in logins/search boxes for me. Why?</a></li>
torbutton/en/torbutton-faq.wml 27) <li><a href="<page torbutton/torbutton-faq>#thunderbird">What about Thunderbird support? I see a page, but it is the wrong version?</a></li>
torbutton/en/torbutton-faq.wml 28) <li><a href="<page torbutton/torbutton-faq>#extensionconflicts">Which Firefox extensions should I avoid using?</a></li>
torbutton/en/torbutton-faq.wml 29) <li><a href="<page torbutton/torbutton-faq>#recommendedextensions">Which Firefox extensions do you recommend?</a></li>
torbutton/en/torbutton-faq.wml 30) <li><a href="<page torbutton/torbutton-faq>#securityissues">Are there any other issues I should be concerned about?</a></li>
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 31) </ul>
|
|
We decided to go with HTML...
Sebastian Hahn authored 14 years ago
|
torbutton/en/torbutton-faq.wml 32) <br>
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 33)
projects/en/torbutton-faq.wml 34) <a id="nojavascript"></a>
projects/en/torbutton-faq.wml 35) <strong><a class="anchor" href="#nojavascript">When I toggle Tor, my sites that use javascript stop working. Why?</a></strong>
projects/en/torbutton-faq.wml 36)
projects/en/torbutton-faq.wml 37) <p>
projects/en/torbutton-faq.wml 38) Javascript can do things like wait until you have disabled Tor before trying
projects/en/torbutton-faq.wml 39) to contact its source site, thus revealing your IP address. As such, Torbutton
projects/en/torbutton-faq.wml 40) must disable Javascript, Meta-Refresh tags, and certain CSS behavior when Tor
projects/en/torbutton-faq.wml 41) state changes from the state that was used to load a given page. These features
projects/en/torbutton-faq.wml 42) are re-enabled when Torbutton goes back into the state that was used to load
projects/en/torbutton-faq.wml 43) the page, but in some cases (particularly with Javascript and CSS) it is
projects/en/torbutton-faq.wml 44) sometimes not possible to fully recover from the resulting errors, and the
projects/en/torbutton-faq.wml 45) page is broken. Unfortunately, the only thing you can do (and still remain
projects/en/torbutton-faq.wml 46) safe from having your IP address leak) is to reload the page when you toggle
projects/en/torbutton-faq.wml 47) Tor, or just ensure you do all your work in a page before switching tor state.
projects/en/torbutton-faq.wml 48) </p>
projects/en/torbutton-faq.wml 49)
projects/en/torbutton-faq.wml 50) <a id="noreloads"></a>
projects/en/torbutton-faq.wml 51) <strong><a class="anchor" href="#noreloads">I can't click on links or hit reload after I toggle Tor! Why?</a></strong>
projects/en/torbutton-faq.wml 52)
projects/en/torbutton-faq.wml 53) <p>
projects/en/torbutton-faq.wml 54) Due to <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=409737">Firefox
projects/en/torbutton-faq.wml 55) Bug 409737</a>, pages can still open popups and perform Javascript redirects
projects/en/torbutton-faq.wml 56) and history access after Tor has been toggled. These popups and redirects can
projects/en/torbutton-faq.wml 57) be blocked, but unfortunately they are indistinguishable from normal user
projects/en/torbutton-faq.wml 58) interactions with the page (such as clicking on links, opening them in new
projects/en/torbutton-faq.wml 59) tabs/windows, or using the history buttons), and so those are blocked as a
projects/en/torbutton-faq.wml 60) side effect. Once that Firefox bug is fixed, this degree of isolation will
projects/en/torbutton-faq.wml 61) become optional (for people who do not want to accidentally click on links and
projects/en/torbutton-faq.wml 62) give away information via referrers). A workaround is to right click on the
projects/en/torbutton-faq.wml 63) link, and open it in a new tab or window. The tab or window won't load
projects/en/torbutton-faq.wml 64) automatically, but you can hit enter in the URL bar, and it will begin
projects/en/torbutton-faq.wml 65) loading. Hitting enter in the URL bar will also reload the page without
projects/en/torbutton-faq.wml 66) clicking the reload button.
projects/en/torbutton-faq.wml 67) </p>
projects/en/torbutton-faq.wml 68)
projects/en/torbutton-faq.wml 69) <a id="noflash"></a>
projects/en/torbutton-faq.wml 70) <strong><a class="anchor" href="#noflash">I can't view videos on YouTube and
projects/en/torbutton-faq.wml 71) other Flash-based sites. Why?</a></strong>
projects/en/torbutton-faq.wml 72)
projects/en/torbutton-faq.wml 73) <p>
projects/en/torbutton-faq.wml 74)
projects/en/torbutton-faq.wml 75) YouTube and similar sites require third party browser plugins such as Flash.
projects/en/torbutton-faq.wml 76) Plugins operate independently from Firefox and can perform
projects/en/torbutton-faq.wml 77) activity on your computer that ruins your anonymity. This includes
projects/en/torbutton-faq.wml 78) but is not limited to: <a href="http://decloak.net">completely disregarding
projects/en/torbutton-faq.wml 79) proxy settings</a>, querying your <a
projects/en/torbutton-faq.wml 80) href="http://forums.sun.com/thread.jspa?threadID=5162138&messageID=9618376">local
projects/en/torbutton-faq.wml 81) IP address</a>, and <a
projects/en/torbutton-faq.wml 82) href="http://epic.org/privacy/cookies/flash.html">storing their own
|
|
move torbutton back to a ma...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 83) cookies</a>. It is possible to use a LiveCD solution such as
torbutton/en/torbutton-faq.wml 84) or <a href="https://amnesia.boum.org/">The (Amnesic) Incognito Live System</a> that creates a
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 85) secure, transparent proxy to protect you from proxy bypass, however issues
projects/en/torbutton-faq.wml 86) with local IP address discovery and Flash cookies still remain. </p>
projects/en/torbutton-faq.wml 87)
projects/en/torbutton-faq.wml 88) <p>
projects/en/torbutton-faq.wml 89)
projects/en/torbutton-faq.wml 90) If you are not concerned about being tracked by these sites (and sites that
projects/en/torbutton-faq.wml 91) try to unmask you by pretending to be them), and are unconcerned about your
projects/en/torbutton-faq.wml 92) local censors potentially noticing you visit them, you can enable plugins by
projects/en/torbutton-faq.wml 93) going into the Torbutton Preferences->Security Settings->Dynamic Content
projects/en/torbutton-faq.wml 94) tab and unchecking "Disable plugins during Tor usage" box. If you do this
projects/en/torbutton-faq.wml 95) without Tor VM, The (Amnesic) Incognito Live System or appropriate
projects/en/torbutton-faq.wml 96) firewall rules, we strongly suggest you at least use <a
projects/en/torbutton-faq.wml 97) href="https://addons.mozilla.org/en-US/firefox/addon/722">NoScript</a> to <a
projects/en/torbutton-faq.wml 98) href="http://noscript.net/features#contentblocking">block plugins</a>. You do
projects/en/torbutton-faq.wml 99) not need to use the NoScript per-domain permissions if you check the <b>Apply
projects/en/torbutton-faq.wml 100) these restrictions to trusted sites too</b> option under the NoScript Plugins
projects/en/torbutton-faq.wml 101) preference tab. In fact, with this setting you can even have NoScript allow
projects/en/torbutton-faq.wml 102) Javascript globally, but still block all plugins until you click on their
projects/en/torbutton-faq.wml 103) placeholders in a page. We also recommend <a
projects/en/torbutton-faq.wml 104) href="https://addons.mozilla.org/en-US/firefox/addon/6623">Better Privacy</a>
projects/en/torbutton-faq.wml 105) in this case to help you clear your Flash cookies.
projects/en/torbutton-faq.wml 106)
projects/en/torbutton-faq.wml 107) </p>
projects/en/torbutton-faq.wml 108)
projects/en/torbutton-faq.wml 109) <a id="oldtorbutton"></a>
projects/en/torbutton-faq.wml 110) <strong><a class="anchor" href="#oldtorbutton">Torbutton sure seems to do a lot of things, some of which I find
projects/en/torbutton-faq.wml 111) annoying. Can't I just use the old version?</a></strong>
projects/en/torbutton-faq.wml 112)
projects/en/torbutton-faq.wml 113) <p>
projects/en/torbutton-faq.wml 114)
projects/en/torbutton-faq.wml 115) <b>No.</b> Use of the old version, or any other vanilla proxy changer
projects/en/torbutton-faq.wml 116) (including FoxyProxy -- see below) without Torbutton is actively discouraged.
projects/en/torbutton-faq.wml 117) Seriously. Using a vanilla proxy switcher by itself is so insecure that you are
projects/en/torbutton-faq.wml 118) not only just wasting your time, you are also actually endangering yourself.
projects/en/torbutton-faq.wml 119) <b>Simply do not use Tor</b> and you will have the same (and in some cases,
projects/en/torbutton-faq.wml 120) better) security. For more information on the types of attacks you are exposed
projects/en/torbutton-faq.wml 121) to with a "homegrown" solution, please see <a
|
|
fix links to design html si...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 122) href="design/index.html.en#adversary">The Torbutton
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 123) Adversary Model</a>, in particular the <a
|
|
fix links to design html si...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 124) href="design/index.html.en#attacks">Adversary
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 125) Capabilities - Attacks</a> subsection. If there are any specific Torbutton
projects/en/torbutton-faq.wml 126) behaviors that you do not like, please file a bug on <a
|
|
fix links to trac, and the...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 127) href="https://trac.torproject.org/projects/tor/report/14">the
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 128) bug tracker.</a> Most of Torbutton's security features can also be disabled via
projects/en/torbutton-faq.wml 129) its preferences, if you think you have your own protection for those specific
projects/en/torbutton-faq.wml 130) cases.
projects/en/torbutton-faq.wml 131)
projects/en/torbutton-faq.wml 132) </p>
projects/en/torbutton-faq.wml 133)
projects/en/torbutton-faq.wml 134) <a id="weirdstate"></a>
projects/en/torbutton-faq.wml 135) <strong><a class="anchor" href="#weirdstate">My browser is in some weird state where nothing works right!</a></strong>
projects/en/torbutton-faq.wml 136)
projects/en/torbutton-faq.wml 137) <p>
projects/en/torbutton-faq.wml 138) Try to disable Tor by clicking on the button, and then open a new window. If
projects/en/torbutton-faq.wml 139) that doesn't fix the issue, go to the preferences page and hit 'Restore
projects/en/torbutton-faq.wml 140) Defaults'. This should reset the extension and Firefox to a known good
projects/en/torbutton-faq.wml 141) configuration. If you can manage to reproduce whatever issue gets your
projects/en/torbutton-faq.wml 142) Firefox wedged, please file details at <a
|
|
fix links to trac, and the...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 143) href="https://trac.torproject.org/projects/tor/report/14">the bug tracker</a>.
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 144) </p>
projects/en/torbutton-faq.wml 145)
projects/en/torbutton-faq.wml 146) <a id="noautocomplete"></a>
projects/en/torbutton-faq.wml 147) <strong><a class="anchor" href="#noautocomplete">When I use Tor, Firefox is no longer filling in logins/search boxes
projects/en/torbutton-faq.wml 148) for me. Why?</a></strong>
projects/en/torbutton-faq.wml 149)
projects/en/torbutton-faq.wml 150) <p>
projects/en/torbutton-faq.wml 151) Currently, this is tied to the "<b>Block history writes during Tor</b>"
projects/en/torbutton-faq.wml 152) setting. If you have enabled that setting, all formfill functionality (both
projects/en/torbutton-faq.wml 153) saving and reading) is disabled. If this bothers you, you can uncheck that
projects/en/torbutton-faq.wml 154) option, but both history and forms will be saved. To prevent history
projects/en/torbutton-faq.wml 155) disclosure attacks via Non-Tor usage, it is recommended you disable Non-Tor
projects/en/torbutton-faq.wml 156) history reads if you allow history writing during Tor.
projects/en/torbutton-faq.wml 157) </p>
projects/en/torbutton-faq.wml 158)
projects/en/torbutton-faq.wml 159) <a id="thunderbird"></a>
projects/en/torbutton-faq.wml 160) <strong><a class="anchor" href="#thunderbird">What about Thunderbird support? I see a page, but it is the wrong
projects/en/torbutton-faq.wml 161) version?</a></strong>
projects/en/torbutton-faq.wml 162)
projects/en/torbutton-faq.wml 163) <p>
projects/en/torbutton-faq.wml 164) Torbutton used to support basic proxy switching on Thunderbird back in the 1.0
projects/en/torbutton-faq.wml 165) days, but that support has been removed because it has not been analyzed for
projects/en/torbutton-faq.wml 166) security. My developer tools page on addons.mozilla.org clearly lists Firefox
projects/en/torbutton-faq.wml 167) support only, so I don't know why they didn't delete that Thunderbird listing.
projects/en/torbutton-faq.wml 168) I am not a Thunderbird user and unfortunately, I don't have time to analyze
projects/en/torbutton-faq.wml 169) the security issues involved with toggling proxy settings in that app. It
projects/en/torbutton-faq.wml 170) likely suffers from similar (but not identical) state and proxy leak issues
projects/en/torbutton-faq.wml 171) with html mail, embedded images, javascript, plugins and automatic network
projects/en/torbutton-faq.wml 172) access. My recommendation is to create a completely separate Thunderbird
projects/en/torbutton-faq.wml 173) profile for your Tor accounts and use that instead of trying to toggle proxy
projects/en/torbutton-faq.wml 174) settings. But if you really like to roll fast and loose with your IP, you
projects/en/torbutton-faq.wml 175) could try another proxy switcher like ProxyButton, SwitchProxy or FoxyProxy
projects/en/torbutton-faq.wml 176) (if any of those happen to support thunderbird).
projects/en/torbutton-faq.wml 177) </p>
projects/en/torbutton-faq.wml 178)
projects/en/torbutton-faq.wml 179) <a id="extensionconflicts"></a>
projects/en/torbutton-faq.wml 180) <strong><a class="anchor" href="#extensionconflicts">Which Firefox extensions should I avoid using?</a></strong>
projects/en/torbutton-faq.wml 181)
projects/en/torbutton-faq.wml 182) <p>
projects/en/torbutton-faq.wml 183) This is a tough one. There are thousands of Firefox extensions: making a
projects/en/torbutton-faq.wml 184) complete list of ones that are bad for anonymity is near impossible. However,
projects/en/torbutton-faq.wml 185) here are a few examples that should get you started as to what sorts of
projects/en/torbutton-faq.wml 186) behavior are dangerous.
projects/en/torbutton-faq.wml 187) </p>
projects/en/torbutton-faq.wml 188)
projects/en/torbutton-faq.wml 189) <ol>
projects/en/torbutton-faq.wml 190) <li>StumbleUpon, et al
projects/en/torbutton-faq.wml 191) <p>
projects/en/torbutton-faq.wml 192) These extensions will send all sorts of information about the websites you
projects/en/torbutton-faq.wml 193) visit to the stumbleupon servers, and correlate this information with a
projects/en/torbutton-faq.wml 194) unique identifier. This is obviously terrible for your anonymity.
projects/en/torbutton-faq.wml 195) More generally, any sort of extension that requires registration, or even
projects/en/torbutton-faq.wml 196) extensions that provide information about websites you visit should be
projects/en/torbutton-faq.wml 197) suspect.
projects/en/torbutton-faq.wml 198) </p></li>
projects/en/torbutton-faq.wml 199) <li>FoxyProxy
projects/en/torbutton-faq.wml 200) <p>
projects/en/torbutton-faq.wml 201) While FoxyProxy is a nice idea in theory, in practice it is impossible to
projects/en/torbutton-faq.wml 202) configure securely for Tor usage without Torbutton. Like all vanilla third
projects/en/torbutton-faq.wml 203) party proxy plugins, the main risks are <a
projects/en/torbutton-faq.wml 204) href="http://www.metasploit.com/research/projects/decloak/">plugin leakage</a>
projects/en/torbutton-faq.wml 205) and <a href="http://ha.ckers.org/weird/CSS-history.cgi">history
projects/en/torbutton-faq.wml 206) disclosure</a>, followed closely by cookie theft by exit nodes and tracking by
|
|
fix links to design html si...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 207) adservers (see the <a href="design/index.html.en#adversary">Torbutton Adversary
|
|
first cut of the new, shiny...
Andrew Lewman authored 14 years ago
|
projects/en/torbutton-faq.wml 208) Model</a> for more information). However, with Torbutton installed in tandem
projects/en/torbutton-faq.wml 209) and always enabled, it is possible to configure FoxyProxy securely (though it
projects/en/torbutton-faq.wml 210) is tricky). Since FoxyProxy's 'Patterns' mode only applies to specific urls,
projects/en/torbutton-faq.wml 211) and not to an entire tab, setting FoxyProxy to only send specific sites
projects/en/torbutton-faq.wml 212) through Tor will still allow adservers (whose hosts don't match your filters) to learn your real IP. Worse, when
projects/en/torbutton-faq.wml 213) sites use offsite logging services such as Google Analytics, you will
projects/en/torbutton-faq.wml 214) still end up in their logs with your real IP. Malicious exit nodes can also
projects/en/torbutton-faq.wml 215) cooperate with sites to inject images into pages that bypass your filters.
projects/en/torbutton-faq.wml 216) Setting FoxyProxy to only send certain URLs via Non-Tor is much more secure in
projects/en/torbutton-faq.wml 217) this regard, but be very careful with the filters you allow. For example,
projects/en/torbutton-faq.wml 218) something as simple as allowing *google* to go via Non-Tor will still cause you to end up
projects/en/torbutton-faq.wml 219) in all the logs of all websites that use Google Analytics! See
projects/en/torbutton-faq.wml 220) <a href="http://foxyproxy.mozdev.org/faq.html#privacy-01">this question</a> on
projects/en/torbutton-faq.wml 221) the FoxyProxy FAQ for more information.
projects/en/torbutton-faq.wml 222) </p></li>
projects/en/torbutton-faq.wml 223) </ol>
projects/en/torbutton-faq.wml 224)
projects/en/torbutton-faq.wml 225) <a id="recommendedextensions"></a>
projects/en/torbutton-faq.wml 226) <strong><a class="anchor" href="#recommendedextensions">Which Firefox extensions do you recommend?</a></strong>
projects/en/torbutton-faq.wml 227) <ol>
projects/en/torbutton-faq.wml 228) <li><a href="https://addons.mozilla.org/firefox/addon/953">RefControl</a>
projects/en/torbutton-faq.wml 229) <p>
projects/en/torbutton-faq.wml 230) Mentioned above, this extension allows more fine-grained referrer spoofing
projects/en/torbutton-faq.wml 231) than Torbutton currently provides. It should break less sites than Torbutton's
projects/en/torbutton-faq.wml 232) referrer spoofing option.</p></li>
projects/en/torbutton-faq.wml 233)
projects/en/torbutton-faq.wml 234) <li><a href="https://addons.mozilla.org/firefox/addon/1474">SafeCache</a>
projects/en/torbutton-faq.wml 235) <p>
projects/en/torbutton-faq.wml 236) If you use Tor excessively, and rarely disable it, you probably want to
projects/en/torbutton-faq.wml 237) install this extension to minimize the ability of sites to store long term
projects/en/torbutton-faq.wml 238) identifiers in your cache. This extension applies same origin policy to the
projects/en/torbutton-faq.wml 239) cache, so that elements are retrieved from the cache only if they are fetched
projects/en/torbutton-faq.wml 240) from a document in the same origin domain as the cached element.
projects/en/torbutton-faq.wml 241) </p></li>
projects/en/torbutton-faq.wml 242)
projects/en/torbutton-faq.wml 243) <li><a href="https://addons.mozilla.org/en-US/firefox/addon/6623">Better
projects/en/torbutton-faq.wml 244) Privacy</a>
projects/en/torbutton-faq.wml 245) <p>
projects/en/torbutton-faq.wml 246)
projects/en/torbutton-faq.wml 247) Better Privacy is an excellent extension that protects you from cookies used
projects/en/torbutton-faq.wml 248) by Flash applications, which often persist forever and are not clearable via
projects/en/torbutton-faq.wml 249) normal Firefox "Private Data" clearing. Flash and all other plugins are
projects/en/torbutton-faq.wml 250) disabled by Torbutton by default, but if you are interested in privacy, you
projects/en/torbutton-faq.wml 251) may want this extension to allow you to inspect and automatically clear your
projects/en/torbutton-faq.wml 252) Flash cookies for your Non-Tor usage.
projects/en/torbutton-faq.wml 253)
projects/en/torbutton-faq.wml 254) </p>
projects/en/torbutton-faq.wml 255) </li>
projects/en/torbutton-faq.wml 256) <li><a href="https://addons.mozilla.org/firefox/addon/1865">AdBlock Plus</a>
projects/en/torbutton-faq.wml 257) <p>
projects/en/torbutton-faq.wml 258)
projects/en/torbutton-faq.wml 259) AdBlock Plus is an excellent addon for removing annoying, privacy-invading,
projects/en/torbutton-faq.wml 260) and <a
projects/en/torbutton-faq.wml 261) href="http://www.wired.com/techbiz/media/news/2007/11/doubleclick">malware-distributing</a>
projects/en/torbutton-faq.wml 262) advertisements from the web. It provides
projects/en/torbutton-faq.wml 263) <a href="http://adblockplus.org/en/subscriptions">subscriptions</a> that are
projects/en/torbutton-faq.wml 264) continually updated to catch the latest efforts of ad networks to circumvent
projects/en/torbutton-faq.wml 265) these filters. I recommend the EasyPrivacy+EasyList combination filter
projects/en/torbutton-faq.wml 266) subscription in the Miscellaneous section of the subscriptions page.
projects/en/torbutton-faq.wml 267)
projects/en/torbutton-faq.wml 268) </p>
projects/en/torbutton-faq.wml 269) </li>
projects/en/torbutton-faq.wml 270) <li><a href="https://addons.mozilla.org/firefox/addon/82">Cookie Culler</a>
projects/en/torbutton-faq.wml 271) <p>
projects/en/torbutton-faq.wml 272)
projects/en/torbutton-faq.wml 273) Cookie Culler is a handy extension to give quick access to the cookie manager
projects/en/torbutton-faq.wml 274) in Firefox. It also provides the ability to protect certain cookies from
projects/en/torbutton-faq.wml 275) deletion, but unfortunately, this behavior does not integrate well with Torbutton. Kory Kirk is working on addressing this for this Google Summer of Code project for 2009.
projects/en/torbutton-faq.wml 276)
projects/en/torbutton-faq.wml 277) </p>
projects/en/torbutton-faq.wml 278) </li>
projects/en/torbutton-faq.wml 279)
projects/en/torbutton-faq.wml 280) <li><a href="https://addons.mozilla.org/en-US/firefox/addon/722">NoScript</a>
projects/en/torbutton-faq.wml 281) <p>
projects/en/torbutton-faq.wml 282) Torbutton currently mitigates all known anonymity issues with Javascript.
projects/en/torbutton-faq.wml 283) However, if you are concerned about Javascript exploits against your browser
projects/en/torbutton-faq.wml 284) or against websites you are logged in to, you may want to use NoScript. It
projects/en/torbutton-faq.wml 285) provides the ability to allow Javascript only for particular websites
projects/en/torbutton-faq.wml 286) and also provides mechanisms to force HTTPS urls for sites with
projects/en/torbutton-faq.wml 287) <a href="http://fscked.org/category/tags/insecurecookies">insecure
projects/en/torbutton-faq.wml 288) cookies</a>.<br>
projects/en/torbutton-faq.wml 289)
projects/en/torbutton-faq.wml 290) It can be difficult to configure such that the most sites will work
projects/en/torbutton-faq.wml 291) properly though. In particular, you want to make sure you do not remove
projects/en/torbutton-faq.wml 292) the Javascript whitelist for
projects/en/torbutton-faq.wml 293) addons.mozilla.org, as extensions are downloaded via http and verified by
projects/en/torbutton-faq.wml 294) javascript from the https page.
projects/en/torbutton-faq.wml 295)
projects/en/torbutton-faq.wml 296) </p></li>
projects/en/torbutton-faq.wml 297) <li><a href="https://addons.mozilla.org/en-US/firefox/addon/9727/">Request
projects/en/torbutton-faq.wml 298) Policy</a>
projects/en/torbutton-faq.wml 299) <p>
projects/en/torbutton-faq.wml 300)
projects/en/torbutton-faq.wml 301) Request Policy is similar to NoScript in that it requires that you configure
projects/en/torbutton-faq.wml 302) which sites are allowed to load content from other domains. It can be very
projects/en/torbutton-faq.wml 303) difficult for novice users to configure properly, but it does provide a good
projects/en/torbutton-faq.wml 304) deal of protection against ads, injected content, and cross-site request
projects/en/torbutton-faq.wml 305) forgery attacks.
projects/en/torbutton-faq.wml 306)
projects/en/torbutton-faq.wml 307) </p>
projects/en/torbutton-faq.wml 308) </li>
projects/en/torbutton-faq.wml 309)
projects/en/torbutton-faq.wml 310) </ol>
projects/en/torbutton-faq.wml 311)
projects/en/torbutton-faq.wml 312) <a id="securityissues"></a>
projects/en/torbutton-faq.wml 313) <strong><a class="anchor" href="#securityissues">Are there any other issues I should be concerned about?</a></strong>
projects/en/torbutton-faq.wml 314)
projects/en/torbutton-faq.wml 315) <p>
projects/en/torbutton-faq.wml 316) There are a few known security issues with Torbutton (all of which are due to
|
|
fix links to design html si...
Andrew Lewman authored 14 years ago
|
torbutton/en/torbutton-faq.wml 317) <a href="design/index.html.en#FirefoxBugs">unfixed
|
first cut of the new, shiny...
We decided to go with HTML...