3 ms·
Why is JavaScript an issue? In private mode no traces (like cookies) are permanent, so how can JavaScript be used against anonymity? Of course, it increases th
by bad_user 13y ago
Why is JavaScript an issue? In private mode no traces (like cookies) are permanent, so how can JavaScript be used against anonymity?
Of course, it increases the surface area of attack for exploits, but is there something else I'm missing?
- Skalman 13y agoIt adds a great amount of fingerprintability.
- foobarqux 13y agoDisabling javascript would probably add about the same amount of fingerprintability. Panopticlick says that 1 in 24000 browsers have the same fingerprint as TorBrowser.
- tghw 13y agoThere was a recent attack against TorBrowser that utilized a vulnerability in older versions of the Firefox Javascript engine. These sorts of vulnerabilities are not uncommon, so turning off JS significantly decreases the attack surface.
- brymaster 13y agoHere's a good example: https://news.ycombinator.com/item?id=6154246 https://news.ycombinator.com/item?id=6154246