4 ms·
Why would this allow de-anonymization? Does the request not go through the Tor network?
by gcp 9y ago
Why would this allow de-anonymization? Does the request not go through the Tor network?
- kuschku 9y agoI changed the wording of my post, but generally, the Tor Browser uses NoScript to block Google Analytics anywhere to improve security, and this page circumvents that, allowing Google Analytics to be loaded. This provides significantly more tracking information than if no GA script was ever loaded. Additionally, that page has special access to allow installing addons, or removing them, and the Google Analytics script might be able to abuse that to install an addon that leaks your data.
- gcp 9y agoYou'd still see an installation doorhanger. Fore sure, this will leak info you'd rather not, but I see no evidence it allows de-anonymization. If it did, any custom tracking NoScript doesn't know about would defeat Tor. And that's not the case.
- kuschku 9y agoThe issue is less random tracking, but that from 57 on no addon can block this, and that it runs in a privileged context.