6 ms·
Oh by the way, the entire time this page has been open in your browser we've been using you as a FlashProxy to connect Chinese people to Tor. Thanks!
by excalibur 11y ago
Oh by the way, the entire time this page has been open in your browser we've been using you as a FlashProxy to connect Chinese people to Tor. Thanks!
- deleted 11y ago[deleted]
- chucky_z 11y agoI've confirmed this... It's an opt-out proxy in this situation (can be setup as opt-in). https://crypto.stanford.edu/flashproxy/ https://crypto.stanford.edu/flashproxy/ > There is an options page[1] (the same page you get by clicking on the badge) with which users can choose whether they want to be a proxy. By default, if a user has not made a choice, they will be a proxy. If you want only people who have explicitly clicked "yes" to be a proxy, add the cookierequired parameter. If a user has selected "no," they will never be a proxy, regardless of the presence of cookierequired. [1] https://crypto.stanford.edu/flashproxy/options.html https://crypto.stanford.edu/flashproxy/options.html
- mindslight 11y agoMuch less offensive than showing unrelated images meant to confuse and disrupt my commercial decision making process, usually accompanied by persistent surveillance for increased effectiveness. In either case, your ire is better directed at your browser.
- beamatronic 11y agoHow does the flash proxy get around the same origin policy? Or does it only allow access to the page it's loaded from?
- dzhiurgis 11y agoSOP/CORS does not apply to WebSocket
- rayiner 11y agoSeriously? That's outrageous.
- imaginenore 11y agoAnd likely illegal.
- ominous 11y agoIllegal where?
- imaginenore 11y agoIn the US.
- 4ad 11y agoWhy?
- ryanlol 11y agoQuite possibly unauthorized access.
- 4ad 11y agoWho is not authorised to access what?
- rayiner 11y agoWhen you visit a website that downloads Javascript to your computer, you are giving the site an implied license to execute code reasonably related to the website. If they go off and use that capability to do something else, you've exceeded the scope of that implied license. It's like going to a kitchen remodeling store and hosting a dinner party there. Yes, they invited you in, but the scope of that invitation was looking at new counters, not hosting a party. That's trespassing. In the computer realm, it may well be a CFAA violation.
- torrio888 11y agoTor project discontinued flashproxy.