Re: Why is TorButton and not FoxyProxy so much supported by the tor project?
On 10/01/2008, kazaam [EMAIL PROTECTED] wrote: With TorButton I see many problems: * People use Tor and surfe the web. They then wanna visit a page they trust and switch off TorButton. On this page they visit a link or so and forget about not using tor anymore and are possibly redirected to somewhere they don't want to be visible. * Someone visits a webpage he thinks he can trust without tor but the domain went down before and is now redirecting to some jerks. Something similar happend with dl.am a few weeks ago.. * Or some xss is going on and some hostile webserver gets their IP through an iframe and kinds of that. * Surfing two websites, one with tor and the other not at the same time is nearly impossible with torbutton. I know I can start loading a page with torbutton and then deactivate torbutton and start loading another page and the first one still loads to the end with using tor but at the moment I wanna click a link there I'm fucked... Never used Foxy Proxy so I can't compare, but just for a slightly different perspective ... Points 14: I use multiple Firefox profiles - one for Tor, others for various different categories of sites (trusted, non-trusted, GMail, ...) which have different security settings. Means more memory/disk use but also clearly delineates usage. At least in my mind. Points 23: I run two instances on Privoxy - one for Tor, one for everything else. Again, more memory/disk, but worth the effort. I like the idea of knowing exactly how a browser instance is going to connect to a web server, without having to remember whether or not I've previously white listed it. Jo
Re: Why is TorButton and not FoxyProxy so much supported by the tor project?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 kazaam schrieb: Hi, I myself am using the foxyproxy plugin and not torbutton. With foxyproxy I simply make a blacklistrule which routes evertyhing through tor and only whitelist pages I'm really trusting. With TorButton I see many problems: [...] To make a long story short, the new development-version of Torbutton has improved dramatically. See http://itnomad.wordpress.com/2008/01/02/try-new-torbutton-firefox-plugin/ for instance. (shameless advertisement for my blog;) Cheers, Alex. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iQCVAwUBR4UdnBYlVVSQ3uFxAQJM8AQAlI7LU5xXzzHFTRPZYqxI8zRqqsVGc/Ml rFOBlABVdGWqo5T8ZpgLOZSdwj4ahW8PZe6NMfQ2lBRjfQvAe8hfNXBTr4/6BmyL /3XIVtAFayuhfRuYAvUUujT1Iq9Iq5qPCtlpARBb8eue7W7iF3f+b8AfxH7SZ+Xb eQhVyrcoN5c= =wVYb -END PGP SIGNATURE-
Why is TorButton and not FoxyProxy so much supported by the tor project?
Hi, I myself am using the foxyproxy plugin and not torbutton. With foxyproxy I simply make a blacklistrule which routes evertyhing through tor and only whitelist pages I'm really trusting. With TorButton I see many problems: * People use Tor and surfe the web. They then wanna visit a page they trust and switch off TorButton. On this page they visit a link or so and forget about not using tor anymore and are possibly redirected to somewhere they don't want to be visible. * Someone visits a webpage he thinks he can trust without tor but the domain went down before and is now redirecting to some jerks. Something similar happend with dl.am a few weeks ago.. * Or some xss is going on and some hostile webserver gets their IP through an iframe and kinds of that. * Surfing two websites, one with tor and the other not at the same time is nearly impossible with torbutton. I know I can start loading a page with torbutton and then deactivate torbutton and start loading another page and the first one still loads to the end with using tor but at the moment I wanna click a link there I'm fucked... All these are things which you don't have to be afraid when using foxyproxy. When you leave your trusted page willing or not or some iframe comes from another domain...you are still save. What can Torbutton better? Okay I have to confess its a bit easier to configure but also this is no great advantage. The time developing tor-button could have been used to ship a default-tor config for foxproxy. So foxyproxy isn't that hard to configure in contrast to torbutton and you could as said make it even simpler by shippen a default-tor config. The next thing I heard about in Roger Dingledines speach at the 24c3 is that they now are going to reinvent the wheel in torbutton :) They are planning to include the feature of noscipt,cookiesafe,refcontrol and modifyheader in Torbutton. First I have to say that I'm long time waiting for all these plugins being gathered in one tool, all sharing the same white-and blacklists and so on. But will Torbutton finally have the ability to black-and whitelist pages? greets pgpPv7SZN2Qvt.pgp Description: PGP signature
