Damian Johnson commited on 2015-02-15 22:13:14
Zeige 1 geänderte Dateien mit 0 Einfügungen und 63 Löschungen.
Tried to get ahold of Georg to see if he's interested in mentoring this but no luck, so dropping the project.
... | ... |
@@ -422,11 +422,6 @@ meetings around the world.</li> |
422 | 422 |
privacy and security issues in mainline version. |
423 | 423 |
</p> |
424 | 424 |
|
425 |
- <p> |
|
426 |
- <b>Project Ideas:</b><br /> |
|
427 |
- <i><a href="#panopticlick">Panopticlick</a></i><br /> |
|
428 |
- </p> |
|
429 |
- |
|
430 | 425 |
<a id="project-httpseverywhere"></a> |
431 | 426 |
<h3><a href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a> (<a |
432 | 427 |
href="https://gitweb.torproject.org/https-everywhere.git">code</a>, <a |
... | ... |
@@ -1432,64 +1427,6 @@ the codebase that you want to work on. |
1432 | 1427 |
</p> |
1433 | 1428 |
</li> |
1434 | 1429 |
|
1435 |
- <a id="panopticlick"></a> |
|
1436 |
- <li> |
|
1437 |
- <b>Panopticlick</b> |
|
1438 |
- <br> |
|
1439 |
- Effort Level: <i>Medium</i> |
|
1440 |
- <br> |
|
1441 |
- Skill Level: <i>Medium</i> |
|
1442 |
- <br> |
|
1443 |
- Likely Mentors: <i>Georg (GeKo)</i> |
|
1444 |
- <p> |
|
1445 |
- |
|
1446 |
-The <a href="https://panopticlick.eff.org">Panopticlick project by the EFF</a> |
|
1447 |
-revolutionized how people think about <a |
|
1448 |
-href="https://panopticlick.eff.org/browser-uniqueness.pdf">browser |
|
1449 |
-fingerprinting</a>, both by developing tests and metrics to measure browser |
|
1450 |
-fingerprintability, and by crowdsourcing the evaluation and contribution of |
|
1451 |
-individual browser features to overall fingerprintability. |
|
1452 |
- |
|
1453 |
- </p> |
|
1454 |
- <p> |
|
1455 |
- |
|
1456 |
-Unfortunately, the way Panopticlick is designed <a |
|
1457 |
-href="https://blog.torproject.org/blog/effs-panopticlick-and-torbutton">makes |
|
1458 |
-it difficult</a> to evaluate defenses to browser fingerprinting, especially |
|
1459 |
-for browsers with a relatively small userbase such as Tor Browser. This is |
|
1460 |
-because any approach we take to reduce fingerprinting automatically makes our |
|
1461 |
-users more distinct from the previous users who submitted their fingerprint |
|
1462 |
-data to the EFF. Indeed, it is also impossible to ever expect that users of |
|
1463 |
-one browser will ever be able to blend in with users of another browser |
|
1464 |
-(Chrome users will always be distinguishable from Firefox users for example, |
|
1465 |
-based on feature set alone). |
|
1466 |
- |
|
1467 |
- </p> |
|
1468 |
- <p> |
|
1469 |
- |
|
1470 |
-To address this, we would like to have <a |
|
1471 |
-href="https://trac.torproject.org/projects/tor/ticket/6119">our own |
|
1472 |
-fingerprint test suite</a> to evaluate the fingerprintability of each browser |
|
1473 |
-feature for users running a specific Tor Browser version. There are also <a |
|
1474 |
-href="https://trac.torproject.org/projects/tor/query?keywords=~tbb-fingerprinting">additional |
|
1475 |
-fingerprinting tests</a> we can add beyond those deployed by Panopticlick. |
|
1476 |
- </p> |
|
1477 |
- <p> |
|
1478 |
- |
|
1479 |
-For this project, the student would develop a website that users can |
|
1480 |
-voluntarily visit to test and record their Tor Browser fingerprint. The user |
|
1481 |
-should get feedback on how she performed and the test results should be |
|
1482 |
-available in a machine readable format (e.g. JSON), broken down by Tor Browser |
|
1483 |
-version. In a second step one could think about adding more sophisticated |
|
1484 |
-tests or supporting other browser vendors that might want to test the |
|
1485 |
-uniformity amongst their userbase as well. Of course, results from each |
|
1486 |
-browser would also need to be broken down by both browser implementation and |
|
1487 |
-version, so that results would only reflect the population of that specific |
|
1488 |
-implementation. |
|
1489 |
- |
|
1490 |
- </p> |
|
1491 |
- </li> |
|
1492 |
- |
|
1493 | 1430 |
<a id="ahmiaSearch"></a> |
1494 | 1431 |
<li> |
1495 | 1432 |
<b>Ahmia - Hidden Service Search</b> |
1496 | 1433 |