Roger Dingledine commited on 2008-07-30 00:11:30
Zeige 1 geänderte Dateien mit 8 Einfügungen und 16 Löschungen.
... | ... |
@@ -85,7 +85,7 @@ function install (aEvent) |
85 | 85 |
|
86 | 86 |
<strong>Current version:</strong><version-torbutton><br/> |
87 | 87 |
<br/> |
88 |
-<strong>Authors:</strong> Scott Squires & Mike Perry<br> |
|
88 |
+<strong>Authors:</strong> Scott Squires & Mike Perry<br/> |
|
89 | 89 |
<strong>Email:</strong> squires at freehaven dot net, mikeperry (o) fscked/org<br/> |
90 | 90 |
<br/> |
91 | 91 |
<strong>Install:</strong> |
... | ... |
@@ -141,8 +141,8 @@ in your version of Firefox. |
141 | 141 |
<a id="FAQ"></a><h2>FAQ</h2> |
142 | 142 |
|
143 | 143 |
<strong>I can't click on links or hit reload after I toggle Tor! Why?</strong> |
144 |
-<p> |
|
145 | 144 |
|
145 |
+<p> |
|
146 | 146 |
Due to <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=409737">Firefox |
147 | 147 |
Bug 409737</a>, pages can still open popups and perform Javascript redirects |
148 | 148 |
and history access after Tor has been toggled. These popups and redirects can |
... | ... |
@@ -160,8 +159,8 @@ clicking the reload button. |
160 | 159 |
</p> |
161 | 160 |
|
162 | 161 |
<strong>My browser is in some weird state where nothing works right!</strong> |
163 |
-<p> |
|
164 | 162 |
|
163 |
+<p> |
|
165 | 164 |
Try to disable Tor by clicking on the button, and then open a new window. If |
166 | 165 |
that doesn't fix the issue, go to the preferences page and hit 'Restore |
167 | 166 |
Defaults'. This should reset the extension and Firefox to a known good |
... | ... |
@@ -173,8 +171,8 @@ bug tracker</a>. |
173 | 171 |
</p> |
174 | 172 |
|
175 | 173 |
<strong>When I toggle Tor, my sites that use javascript stop working. Why?</strong> |
176 |
-<p> |
|
177 | 174 |
|
175 |
+<p> |
|
178 | 176 |
Javascript can do things like wait until you have disabled Tor before trying |
179 | 177 |
to contact its source site, thus revealing your IP address. As such, Torbutton |
180 | 178 |
must disable Javascript, Meta-Refresh tags, and certain CSS behavior when Tor |
... | ... |
@@ -185,31 +183,28 @@ sometimes not possible to fully recover from the resulting errors, and the |
185 | 183 |
page is broken. Unfortunately, the only thing you can do (and still remain |
186 | 184 |
safe from having your IP address leak) is to reload the page when you toggle |
187 | 185 |
Tor, or just ensure you do all your work in a page before switching tor state. |
188 |
- |
|
189 | 186 |
</p> |
190 | 187 |
|
191 |
- |
|
192 | 188 |
<strong>When I use Tor, Firefox is no longer filling in logins/search boxes |
193 | 189 |
for me. Why?</strong> |
194 |
-<p> |
|
195 | 190 |
|
191 |
+<p> |
|
196 | 192 |
Currently, this is tied to the "<b>Block history writes during Tor</b>" |
197 | 193 |
setting. If you have enabled that setting, all formfill functionality (both |
198 | 194 |
saving and reading) is disabled. If this bothers you, you can uncheck that |
199 | 195 |
option, but both history and forms will be saved. To prevent history |
200 | 196 |
disclosure attacks via Non-Tor usage, it is recommended you disable Non-Tor |
201 | 197 |
history reads if you allow history writing during Tor. |
202 |
- |
|
203 | 198 |
</p> |
204 | 199 |
|
205 |
- |
|
206 | 200 |
<strong>Which Firefox extensions should I avoid using?</strong> |
207 |
-<p> |
|
208 | 201 |
|
202 |
+<p> |
|
209 | 203 |
This is a tough one. There are thousands of Firefox extensions: making a |
210 | 204 |
complete list of ones that are bad for anonymity is near impossible. However, |
211 | 205 |
here are a few examples that should get you started as to what sorts of |
212 | 206 |
behavior are dangerous. |
207 |
+</p> |
|
213 | 208 |
|
214 | 209 |
<ol> |
215 | 210 |
<li>StumbleUpon, et al</li> |
... | ... |
@@ -259,10 +254,7 @@ question</a> on the FoxyProxy FAQ for more information. |
259 | 254 |
|
260 | 255 |
</ol> |
261 | 256 |
|
262 |
-</p> |
|
263 |
- |
|
264 | 257 |
<strong>Which Firefox extensions do you recommend?</strong> |
265 |
-<p> |
|
266 | 258 |
<ol> |
267 | 259 |
<li><a href="https://addons.mozilla.org/firefox/addon/953">RefControl</a></li> |
268 | 260 |
Mentioned above, this extension allows more fine-grained referrer spoofing |
... | ... |
@@ -276,11 +268,9 @@ cache, so that elements are retrieved from the cache only if they are fetched |
276 | 268 |
from a document in the same origin domain as the cached element. |
277 | 269 |
</ol> |
278 | 270 |
|
279 |
-</p> |
|
280 |
- |
|
281 | 271 |
<strong>Are there any other issues I should be concerned about?</strong> |
282 |
-<p> |
|
283 | 272 |
|
273 |
+<p> |
|
284 | 274 |
There is currently one known unfixed security issue with Torbutton: it is |
285 | 275 |
possible to unmask the javascript hooks that wrap the Date object to conceal |
286 | 276 |
your timezone in Firefox 2, and the timezone masking code does not work at all |
287 | 277 |