Opened 7 years ago

Closed 6 years ago

Last modified 6 years ago

#8064 closed task (wontfix)

Audit Minitube anonymity for Tails

Reported by: T(A)ILS developers Owned by: ioerror
Priority: Medium Milestone:
Component: Applications/Tor bundles/installation Version:
Severity: Keywords:
Cc: tails@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Alessandro Grassi has been working on adding support for the Minitube standalone YouTube client to Tails: https://tails.boum.org/todo/minitube/

One should audit Minitube anonymity from an anonymity PoV (that is, mainly seen as a HTTP client) for Tails context: https://mailman.boum.org/pipermail/tails-dev/2013-January/002456.html.

Jacob volunteered to do this.

The version that we would like to include is likely to be a backport of current Debian sid's 1.9-1 package, that one may fetch by running:

dget http://http.debian.net/debian/pool/main/m/minitube/minitube_1.9-1.dsc

(dget is included in devscripts).

In the context of Tails, Minitube would use the SOCKS support Alessandro added with a patch (proposed to upstream, not merged by them yet AFAIK).

For further questions, please email
Alessandro Grassi <alessandro.g89@…> and Cc tails-dev@….

Child Tickets

Change History (6)

comment:1 Changed 7 years ago by T(A)ILS developers

Cc: tails@… added

comment:2 Changed 7 years ago by ioerror

What are the primary anonymity concerns?

comment:3 in reply to:  2 Changed 7 years ago by T(A)ILS developers

Replying to ioerror:

What are the primary anonymity concerns?

Given Minitube is a HTTP client, I guess the concerns are about the same as those discussed in the Torbutton design document, mainly History disclosure and Location information in the context of Tails I guess.

Does this answer your question? If not, please clarify the question :)

comment:4 in reply to:  2 Changed 7 years ago by alessandro.g89

Replying to ioerror:

What are the primary anonymity concerns?

I just found (and patched) 2 issues about localization leaking and session cookies. Description is here:
https://mailman.boum.org/pipermail/tails-dev/2013-January/002537.html

comment:5 Changed 6 years ago by alessandro.g89

Resolution: wontfix
Status: newclosed

comment:6 in reply to:  5 Changed 6 years ago by alessandro.g89

Replying to alessandro.g89:
Closed as we decided to move to another program (SMTube)

Note: See TracTickets for help on using tickets.