5 ms·

TorBrowser has Javascript disabled by default, doesn't that mean you have to first 'trick' targets into visiting the webpage, and then trick them into turning o

TorBrowser has Javascript disabled by default, doesn't that mean you have to first 'trick' targets into visiting the webpage, and then trick them into turning on js?

BuuQu9hu 10y ago
TorBrowser has JS on by default I thought.
- ergot 10y ago
  No. That would be reckless and would compromise Tor Browser Bundle from the outset. By default, the NoScript plugin disallows JS from running globally
  - 45h34jh53k4j 10y ago
    NoScript is not enabled by default in Tor Browser (in tails). from: https://tails.boum.org/doc/anonymous_internet/Tor_Browser/#index4h1 https://tails.boum.org/doc/anonymous_internet/Tor_Browser/#i... To allow more control over JavaScript, for example to disable JavaScript completely on some websites, Tor Browser includes the NoScript extension. By default, NoScript is disabled and some JavaScript is allowed by the Torbutton extension as explained above. So, "Yes", this is reckless and would compromise Tor Browser from the outset.
  - BuuQu9hu 10y ago
    IIRC the rationale is that users with JS off are more "weird" so they stand out more.
  - hackuser 10y ago
    > No. That would be reckless ... Maybe so, but I think the GP is correct. At least, it was true a year or so ago.
nine_k 10y ago
I wonder if bgsound [1] attribute is still honored by modern browsers. It's IE-specific, though, so won't work in a Tor browser. [1]: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/bgsound https://developer.mozilla.org/en-US/docs/Web/HTML/Element/bg...
- dogma1138 10y ago
  <audio> and a few other HTML5 sound capable tags don't require JS enabled IIRC.
- deleted 10y ago
  [deleted]
forgotmypw 10y ago
TorBrowser has JS enabled by default, with NoScript enabled. This is not the same thing. The first thing one should do after installing the Tor Browser Bundle is open up about:config, search for javascript.enabled, and set it to false. If an onion site doesn't work without JS, you probably don't want to be on it anyway.

TorBrowser has Javascript disabled by default, doesn't that mean you have to first 'trick' targets into visiting the webpage, and then trick them into turning on js?

BuuQu9hu 10y ago

TorBrowser has JS on by default I thought.

ergot 10y ago
No. That would be reckless and would compromise Tor Browser Bundle from the outset. By default, the NoScript plugin disallows JS from running globally
- 45h34jh53k4j 10y ago
  NoScript is not enabled by default in Tor Browser (in tails). from: https://tails.boum.org/doc/anonymous_internet/Tor_Browser/#index4h1 https://tails.boum.org/doc/anonymous_internet/Tor_Browser/#i... To allow more control over JavaScript, for example to disable JavaScript completely on some websites, Tor Browser includes the NoScript extension. By default, NoScript is disabled and some JavaScript is allowed by the Torbutton extension as explained above. So, "Yes", this is reckless and would compromise Tor Browser from the outset.
- BuuQu9hu 10y ago
  IIRC the rationale is that users with JS off are more "weird" so they stand out more.
- hackuser 10y ago
  > No. That would be reckless ... Maybe so, but I think the GP is correct. At least, it was true a year or so ago.

nine_k 10y ago

I wonder if bgsound [1] attribute is still honored by modern browsers. It's IE-specific, though, so won't work in a Tor browser. [1]: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/bgsound https://developer.mozilla.org/en-US/docs/Web/HTML/Element/bg...

dogma1138 10y ago
<audio> and a few other HTML5 sound capable tags don't require JS enabled IIRC.
deleted 10y ago
[deleted]

forgotmypw 10y ago

TorBrowser has JS enabled by default, with NoScript enabled. This is not the same thing. The first thing one should do after installing the Tor Browser Bundle is open up about:config, search for javascript.enabled, and set it to false. If an onion site doesn't work without JS, you probably don't want to be on it anyway.