-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 02/19/2016 11:44 PM, Paul A. Crable wrote: > A NYT article yesterday discussed tracking blockers and recommended > Disconnect from among four candidates for Intel-architecture > computers. Disconnect would be installed as an add-on to Firefox. > You have a standing recommendation that we not install add-ons to > the TOR browser. Would that prohibition apply to the tracking > blocker Disconnect? > > Paul >
It's not clear to me why Disconnect and similar systems are so popular. My understanding is that they basically act as blacklists. This is relatively easy for a competent attacker to bypass, and the blacklist definitely changes your browser fingerprint compared to a stock browser. (Dynamic blacklists like Privacy Badger are probably worse in terms of fingerprintability.) Tor Browser is designed to make tracking less effective without resorting to a blacklist [1], so in theory you don't need a blacklist anyway. Cheers, - -Jeremy Rand [1] Of course, Tor Browser is imperfect in this area, so it is at least plausible that a blacklist might help in some limited circumstances. I doubt that it would be a net benefit. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWyADLAAoJEAHN/EbZ1y06yIkQANgPvPtFnQyF0Xm6G8o4fTTf g+EmuJnf45mjVAGnHmhnfxyFGzbq/uNgnfaErkbL9oSlrrAeNXXh1Ab0Ydzh2HMh Dyq7IHGF/x0ewLq/3kRDAy5tC2b4zwlgSCHHrpX6ulDj6xZfg3HW0IlJdKu6t90T PEfOWNZYYG2WCr7D0HF8DxRn3cFvQ1/oWKxisXyOvnLkOL50ukjR94XJUe3bZzCu +e3FV8WCfXHIKdRkq+Y1O82waRhwmhUrO6KiONtkcoL9JjFCd7UF4zzWFhclimjb R5j4XUM+02kx30ZAGWkckeoXz9PIGXEZNdCItV//MqN2JLRjr7+W19VlBMzeVSVi Ih5vjhsAduJ1hiNwKBGmOhRsrWjtlSbDulgzcdRv7TQJuYA/RZh2H5TKBwhV6xfW 2N7BcZLG4MMZvcCAt19NQtL2Doxr6zgL228OyTXKqEwJFPWf5hPf/i/sRyVnQWmj wGZLdWDzz9/nBQ+8HKlJ17RX4LI7luE42GihZnh1q7LjpfT5ZeLxBuDoPEn6BsKs Z+i/tF6SrmUSprJ3UOZWGp+Gt8hOlqeXxchbKaKOTDZOBUwckFuld8GuWg/pgzEO pkfz1U4Q6upFIIknvf8yVn2K14yaTs5A4rpQ9afKLdpX90qiWW8ct1DuxSm60Zmo a4p6KoKni90XMoYBUHW7 =QAd5 -----END PGP SIGNATURE----- -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk