Re: [tor-talk] User views on lesser of 2 evils_Tor FAQ on using java script

2014-07-27 Thread Joe Btfsplk
On 7/27/2014 2:08 AM, grarpamp wrote: On Sat, Jul 26, 2014 at 3:26 PM, Joe Btfsplk wrote: How do some more advanced Tor users feel about pros & cons of leaving java script constantly enabled or selectively enabling it? The risk of any potential leak of real IP or actual user data (not just met

Re: [tor-talk] User views on lesser of 2 evils_Tor FAQ on using java script

2014-07-27 Thread Joe Btfsplk
On 7/26/2014 10:13 PM, Moritz Bartl wrote: On 07/26/2014 09:26 PM, Joe Btfsplk wrote: So, is it, "damned if I do, damned if I don't?" Basically, yes. A lot of users including me can cope with only selectively enabling Javascript, but I would strongly argue against making that the default. It is

Re: [tor-talk] User views on lesser of 2 evils_Tor FAQ on using java script

2014-07-27 Thread faether
Joe Btfsplk wrote: > you're effectively forced into either > * disabling js completely Few people do that, so it may in principle shrink your anonymity set more than JS-enabled fingerprinting does. > Seems we must make a choice: Whether more concerned about "some" > sites detecting JS is DISabl

Re: [tor-talk] User views on lesser of 2 evils_Tor FAQ on using java script

2014-07-27 Thread grarpamp
On Sat, Jul 26, 2014 at 3:26 PM, Joe Btfsplk wrote: > How do some more advanced Tor users feel about pros & cons of leaving java > script constantly enabled or selectively enabling it? The risk of any potential leak of real IP or actual user data (not just meta browser environment data) is overri

Re: [tor-talk] User views on lesser of 2 evils_Tor FAQ on using java script

2014-07-26 Thread Moritz Bartl
On 07/26/2014 09:26 PM, Joe Btfsplk wrote: > So, is it, "damned if I do, damned if I don't?" Basically, yes. A lot of users including me can cope with only selectively enabling Javascript, but I would strongly argue against making that the default. It is just too hard to understand for 'casual use

[tor-talk] User views on lesser of 2 evils_Tor FAQ on using java script

2014-07-26 Thread Joe Btfsplk
How do some more advanced Tor users feel about pros & cons of leaving java script constantly enabled or selectively enabling it? The overall java script issue & advice given at different times in different places can get confusing. From https://www.torproject.org/docs/faq#TBBJavaScriptEnabled: