Damian Johnson commited on 2015-02-15 22:13:14
Zeige 1 geänderte Dateien mit 0 Einfügungen und 63 Löschungen.
Tried to get ahold of Georg to see if he's interested in mentoring this but no luck, so dropping the project.
| ... | ... |
@@ -422,11 +422,6 @@ meetings around the world.</li> |
| 422 | 422 |
privacy and security issues in mainline version. |
| 423 | 423 |
</p> |
| 424 | 424 |
|
| 425 |
- <p> |
|
| 426 |
- <b>Project Ideas:</b><br /> |
|
| 427 |
- <i><a href="#panopticlick">Panopticlick</a></i><br /> |
|
| 428 |
- </p> |
|
| 429 |
- |
|
| 430 | 425 |
<a id="project-httpseverywhere"></a> |
| 431 | 426 |
<h3><a href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a> (<a |
| 432 | 427 |
href="https://gitweb.torproject.org/https-everywhere.git">code</a>, <a |
| ... | ... |
@@ -1432,64 +1427,6 @@ the codebase that you want to work on. |
| 1432 | 1427 |
</p> |
| 1433 | 1428 |
</li> |
| 1434 | 1429 |
|
| 1435 |
- <a id="panopticlick"></a> |
|
| 1436 |
- <li> |
|
| 1437 |
- <b>Panopticlick</b> |
|
| 1438 |
- <br> |
|
| 1439 |
- Effort Level: <i>Medium</i> |
|
| 1440 |
- <br> |
|
| 1441 |
- Skill Level: <i>Medium</i> |
|
| 1442 |
- <br> |
|
| 1443 |
- Likely Mentors: <i>Georg (GeKo)</i> |
|
| 1444 |
- <p> |
|
| 1445 |
- |
|
| 1446 |
-The <a href="https://panopticlick.eff.org">Panopticlick project by the EFF</a> |
|
| 1447 |
-revolutionized how people think about <a |
|
| 1448 |
-href="https://panopticlick.eff.org/browser-uniqueness.pdf">browser |
|
| 1449 |
-fingerprinting</a>, both by developing tests and metrics to measure browser |
|
| 1450 |
-fingerprintability, and by crowdsourcing the evaluation and contribution of |
|
| 1451 |
-individual browser features to overall fingerprintability. |
|
| 1452 |
- |
|
| 1453 |
- </p> |
|
| 1454 |
- <p> |
|
| 1455 |
- |
|
| 1456 |
-Unfortunately, the way Panopticlick is designed <a |
|
| 1457 |
-href="https://blog.torproject.org/blog/effs-panopticlick-and-torbutton">makes |
|
| 1458 |
-it difficult</a> to evaluate defenses to browser fingerprinting, especially |
|
| 1459 |
-for browsers with a relatively small userbase such as Tor Browser. This is |
|
| 1460 |
-because any approach we take to reduce fingerprinting automatically makes our |
|
| 1461 |
-users more distinct from the previous users who submitted their fingerprint |
|
| 1462 |
-data to the EFF. Indeed, it is also impossible to ever expect that users of |
|
| 1463 |
-one browser will ever be able to blend in with users of another browser |
|
| 1464 |
-(Chrome users will always be distinguishable from Firefox users for example, |
|
| 1465 |
-based on feature set alone). |
|
| 1466 |
- |
|
| 1467 |
- </p> |
|
| 1468 |
- <p> |
|
| 1469 |
- |
|
| 1470 |
-To address this, we would like to have <a |
|
| 1471 |
-href="https://trac.torproject.org/projects/tor/ticket/6119">our own |
|
| 1472 |
-fingerprint test suite</a> to evaluate the fingerprintability of each browser |
|
| 1473 |
-feature for users running a specific Tor Browser version. There are also <a |
|
| 1474 |
-href="https://trac.torproject.org/projects/tor/query?keywords=~tbb-fingerprinting">additional |
|
| 1475 |
-fingerprinting tests</a> we can add beyond those deployed by Panopticlick. |
|
| 1476 |
- </p> |
|
| 1477 |
- <p> |
|
| 1478 |
- |
|
| 1479 |
-For this project, the student would develop a website that users can |
|
| 1480 |
-voluntarily visit to test and record their Tor Browser fingerprint. The user |
|
| 1481 |
-should get feedback on how she performed and the test results should be |
|
| 1482 |
-available in a machine readable format (e.g. JSON), broken down by Tor Browser |
|
| 1483 |
-version. In a second step one could think about adding more sophisticated |
|
| 1484 |
-tests or supporting other browser vendors that might want to test the |
|
| 1485 |
-uniformity amongst their userbase as well. Of course, results from each |
|
| 1486 |
-browser would also need to be broken down by both browser implementation and |
|
| 1487 |
-version, so that results would only reflect the population of that specific |
|
| 1488 |
-implementation. |
|
| 1489 |
- |
|
| 1490 |
- </p> |
|
| 1491 |
- </li> |
|
| 1492 |
- |
|
| 1493 | 1430 |
<a id="ahmiaSearch"></a> |
| 1494 | 1431 |
<li> |
| 1495 | 1432 |
<b>Ahmia - Hidden Service Search</b> |
| 1496 | 1433 |