Hacker News new | ask | show | jobs
by AdmiralAsshat 3800 days ago
Tor Browser 5.5 introduces protection against fingerprinting but due to an oversight it is not enabled in Tails 2.0. However, this is not so bad for Tails users since each Tails system has the same fonts installed, and hence will look identical, so this only means that it's easy to distinguish whether a user of Tor Browser 5.5 uses Tails or not. That is already easy given that Tails has the AdBlock Plus extension enabled, unlike the normal Tor Browser.

I wonder why they opted to preload it with AdBlock Plus instead of uBlock Origin. I'm sure gorhill would certainly give his blessing, and by all measurements it is just as effective with way less overhead.

Heck, they could go one step further and preload it with a uBlock Origin profile on a paranoid mode that proactively disables all JavaScript (last I remember using Tor I had to manually disable Javascript in the Firefox config).

4 comments

> I'm sure gorhill would certainly give his blessing

Not only my blessing, I would be happy to work on whatever is deemed necessary to integrate into TAILS.

A volunteer worked to make uBlock Origin part of Debian earlier this month: https://packages.qa.debian.org/u/ublock-origin.html# -- this at least fulfill one of the condition for TAILS.

uBlock Origin's advanced mode is also a lot nicer for JS blocking than NoScript and similar tools even as it allows you to unblock a CDN for a certain domain but not others, so you don't wind up allowing *.cloudfront.com for the whole internet.

And most privacy conscious people left Adblock Plus after they started allowing "acceptable ads" including from some pretty notorious trackers.

moving to uBlock was at first waiting on it to be included in Debian, but then abandoned as the Adblock in Tails doesn't allow the accepted ads by default (ignoring the performance improvements):

https://labs.riseup.net/code/issues/9833

Sounds like this ticket was raised before the uBlock / Origin split. It would probably be worth re-opening or re-submitting the ticket explicitly with regards to: A) That uBlock Origin is still actively worked on while uBlock has largely stalled. B) The evidence[0] that uBlock Origin operates with substantially less overhead than Adblock Plus C) The ability for uBlock Origin to double as a Javascript blocker.

[0]https://github.com/gorhill/uBlock#cpu

I use AdBlock Plus because of the Element Hiding Helper addon, which lets me easily and perpetually hide whatever DOM element I decide is annoying me or taking up unnecessary space. To my knowledge there is no similar addon for uBlock Origin.
That is built in uBlock Origin.

Click the eyedropper tool "enter element picker mode" https://www.dropbox.com/s/niy881lyaca4zmx/Screenshot%202016-...

Hey, thanks!
It works the same exact way. You can select a DOM element and blacklist it. Manually or by using the Eyedropper tool.

See: http://i.imgur.com/s2pVQ1V.png

I am using uBlock Origin 1.5.5, and it has a Block Element feature. Not sure how it differs from AdBlock Plus's implementation, though.