Opened 5 years ago

Closed 5 years ago

#13216 closed enhancement (wontfix)

add google-analytics.com to noscript.untrusted to make TB less distinguishable than TAILS

Reported by: Freddie101 Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords: noscript, google, anonymity, TAILS, torbrowser, iceweasel
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

1.According to Tor's FAQ "if you disable JavaScript by default but then allow a few websites to run scripts (the way most people use NoScript), then your choice of whitelisted websites acts as a sort of cookie that makes you recognizable (and distinguishable), thus harming your anonymity." https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled

2.In TAILS' IceWeasel, google-analytics.com is marked as untrusted, forbidding it from being executed.

3.While in TB G.A. is allowed.

4.This will make it very easy to distinguish TAILS users from TB users. Which reduces Tor users' anonymity.

5.Solution: add google-analytics.com to about:config > noscript.untrusted

Child Tickets

Change History (2)

comment:1 Changed 5 years ago by Freddie101

EDIT: this isn't about google analytics, it's mereley about the TB and TAILS' fingerprints.

comment:2 Changed 5 years ago by gk

Resolution: wontfix
Status: newclosed

TAILS is now basically shipping our Tor Browser and not the custom Iceweasel anymore. Thus, I guess the google analytics thing is gone. If not, please get back to the TAILS people as we won't mark single things as untrusted which means filtering URLs. See our design document for reasons why: https://www.torproject.org/projects/torbrowser/design/#philosophy section 5.

Note: See TracTickets for help on using tickets.