Project

General

Profile

Feature #6118

Feature #5769: Applications audit

audit iceweasel config

Added by Tails over 6 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

Feature Branch:
Type of work:
Audit
Blueprint:
Starter:
Affected tool:

Description

Done

Almost everything, as long as we use an up to date Torbutton: Mike Perry, the torbutton maintainer, has a pretty good idea of what he's doing.

TODO

browser fingerprinting

See the Panopticlick tool, by the EFF, for fingerprinting tests and stats.

For information about the relative protection torbutton offers against this kind of leak, see

Check Tails User Agent settings:

  • can Torbutton update them?
  • do we lighten Torbutton's protection in any way? if so, shall we go on doing this? e.g.
    • do we set a custom or localized timezone, instead of Torbutton's default (GMT)?
    • do we send custom or localized preferred languages for Content Negotiation?

The devel branch now enables Torbutton's US English locale spoofing.

Firefox 3.5 or later

  • turn off geolocation from the beginning in the browser preferences. New versions of Torbutton disable geolocation, but only when Torbutton is in "enabled" mode
  • It may also be a good idea to disable prefetching.

History

#1 Updated by intrigeri over 6 years ago

  • Type of work set to Audit

Type of work: Audit

#2 Updated by intrigeri over 6 years ago

  • Subject changed from iceweasel to audit iceweasel config
  • Status changed from Confirmed to Resolved
  • Parent task set to #5769

Also available in: Atom PDF