Viewing a single comment thread. View all comments

celebratedrecluse wrote

Reply to comment by gweur in Ad Block on Tor? by rot

Except the ads are also tracking you, usually to companies like Google who do defense contracting work, and blocking them from loading will prevent a wide variety of attacks as well...

There's no good solution that addresses every problem, but there are plenty of threat models in which using an adblock with Tor isn't a bad idea. In fact, one of Tor browser's weaknesses is that it doesn't do much to block these trackers and avoiding loading remote resources.

3

quandyalaterreux wrote

Except the ads are also tracking you

The Tor Browser's first-party isolation (and first-party stream isolation, i.e. a different circuit for every first-party website) and anti-fingerprinting features already defend against that. For more details there's the Tor Browser design document: https://www.torproject.org/projects/torbrowser/design/

2

celebratedrecluse wrote

https://trac.torproject.org/projects/tor/ticket/24351

http://jcarlosnorte.com/security/2016/03/06/advanced-tor-browser-fingerprinting.html

The measures currently in place for TBB re: fingerprinting do a great job, but this is an ongoing arms race. I think it is advisable to assume there are going to be holes in whatever we use for mission critical purposes, even if the protection is actually better than the worse case scenario. This article illustrates my point:

https://medium.com/message/everything-is-broken-81e5f33a24e1

1