Re:Chinese Hackers Circumvent Popular Web Privacy Tools
by the8472 on Monday June 15, 2015 @09:21AM
(#9719103)
AIUI the issue only occurs when you're browsing through tor with a browser profile that also contains logins to chinese websites linked to your identity.
This is why you shouldn't run your regular browser session through TOR for critical work and use the tor browser bundle instead, with a separate profile, with a as-paranoid-as-possible configuration (minimal cross-site requests! use µMatrix, not just noscript) if you really want to information leakage.
Tor itself can only do so much, it doesn't magically prevent your browser from telling the world that you're person X.
Re:Chinese Hackers Circumvent Popular Web Privacy Tools
by mo on Monday June 15, 2015 @09:20PM
(#9723267)
Tor Browser protects against these sorts of attacks very well. Just don't use Tor with a regular browser. https://twitter.com/torproject/status/610542145305464832
What good is using Tor or a VPN if I can't be sure any web page I load will compromise me? Suddenly every single link becomes a potential land mine... is the web server compromised? Is it safe?
You could argue that, of course, loading a malicious web page will do malicious things. But in this case, the malicious code is compromising all further web activity as well from the sounds of it.