Opened 4 years ago

Closed 14 months ago

#16071 closed task (wontfix)

Some sites fight anonimity. It's time to respond.

Reported by: cypherpunks Owned by:
Priority: High Milestone:
Component: Archived/general Version:
Severity: Normal Keywords: archived-closed-2018-07-04
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Hello.
A lot of sites fight anonymity in a harsh way. The most frequent ways are
1 making site unusable without JavaScript to force user to execute fingerprinter. Some sites even doesn't work if you are visiting through tor. Some don't even allow to read them, because they are owned by companies which are collaborate with NSA.
2 using reCaptcha, which became unsolvable for tor users (it is both very hard, and even if you clearly type it correctly, it is refused. sorry.google.com captcha behaves in the same way)
3 using cloudflare and seting it up in the way that it disallow tor

It's time to fight this.
We need
1 to create a registry of sites which are intolerant to anonymity and encourage users to abandon them. Make shameful to be intolerant to it.
2 create scripts like noscript surrogates which bypass bypassable measures.

Child Tickets

TicketStatusOwnerSummaryComponent
#16499newtbb-teamWe need more NoScript SurrogatesApplications/Tor Browser

Change History (5)

comment:1 Changed 4 years ago by vynX

Maybe it's time for PR, with a big hall of shame taken to all the news… making it clear that these sites are no longer participating in the free and open web/internet.

Maybe even better, contact the most juicy cases that you would mention in the press release and offer them a last chance to make it out of the hall of shame before release.

comment:2 Changed 4 years ago by cypherpunks

Maybe even better, contact the most juicy cases that you would mention in the press release and offer them a last chance to make it out of the hall of shame before release.

No chance. Enlist them to hall of shame first, then ask to fix. If they fixed all the issues and didn't add more, then exclude them and put into hall of fame.

Also I think that there should be a browser addon which
1 measures sites' signs of intolerance to anonymity, which can be measured:
a) it must not redirect if javascript is disabled
b) it mustn't have a warning about that it won't work without javascript
c) it mustn't use supercookies (detect them heuristically, but of course it will be easy to bypass)
d) it mustn't use cloudflare-like services
e) it mustn't use third-party widgets (like recaptcha, social buttons, adsense)/iframes
f) it mustn't use content from cdns
g) it mustnt use fingerprinters (detect them heuristically)
2 shows visited site tolerance to anonimity (including the ones which can be detected by human only)

Also it can be good to establish relationships with mass media (especially it-related magazines) and send them digests about inclusions/exclusions of sites.

comment:3 Changed 4 years ago by cypherpunks

Recently noticed reCAPTCHA unable to resolve apparantly correct CAPTCHA solutions also, created a ticket for it:
https://trac.torproject.org/projects/tor/ticket/16772

comment:4 Changed 21 months ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

comment:5 Changed 14 months ago by teor

Keywords: archived-closed-2018-07-04 added
Resolution: wontfix
Status: newclosed

Close all tickets in archived components

Note: See TracTickets for help on using tickets.