-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 harmony: > Nathan Suchy: >> But will Flash go through Tor? Also I'm just looking through an >> Internet Chatroom not activist work. The admin is a hacker but I >> don't think I'll need to hide my IP other than from software... > > In the TBB design document > [https://www.torproject.org/projects/torbrowser/design/], the > project makes the following statements: > > 'Plugins have the ability to make arbitrary OS system calls and > bypass proxy settings. This includes the ability to make UDP > sockets and send arbitrary data independent of the browser proxy > settings.' > > [...] > > 'Currently, we entirely disable all plugins in Tor Browser. > However, as a compromise due to the popularity of Flash, we allow > users to re-enable Flash, and flash objects are blocked behind a > click-to-play barrier that is available only after the user has > specifically enabled plugins.' > > So on this basis I think the answer to your question is 'yes, Flash > will go through Tor, unless anybody tries anything with you'. You > will be secure absent an attacker, as they say. >
Basically you shouldn't enable it unless you're on something like TAILS, Whonix, Liberté Linux or Ipredia OS (although that's more for i2P rather than Tor). A standard Windows box that can still access the Internet without going through Tor, is vulnerable to attack, and I wouldn't recommend enabling flash on that or JavaScript for that matter as that was recently exploited. https://blog.torproject.org/blog/hidden-services-current-events-and-freedom-hosting https://blog.torproject.org/blog/tor-security-advisory-old-tor-browser-bundles-vulnerable >> >> On Sat, Aug 17, 2013 at 5:58 PM, harmony <[email protected]> >> wrote: >> >>> Nathan Suchy: >>>> I'm investigating a internet chat room and need to use Tor >>>> for anonymity >>> of >>>> my ip address. This chat room is powered by realchat which >>>> requires flash player. Is there a way to get Adobe Flash to >>>> proxy through Tor in the Tor Browser Bundle >>> >>> If you really want to enable it, just go to 'tools > add-ons', >>> then 'plugins' and click 'enable' under 'shockwave flash', >>> BUT: >>> >>>> and only go through Tor when using the Browser Bundle? >>> >>> This is a many-dollar question - see here >>> https://trac.torproject.org/projects/tor/ticket/7008 for >>> current thinking on the numerous things that could go badly >>> wrong. -- tor-talk mailing list - >>> [email protected] To unsusbscribe or change other >>> settings go to >>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk >>> >> >> >> > - -- scarp | A4F7 25DB 2529 CB1A 605B 3CB4 5DA0 4859 0FD4 B313 -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJSEJ7MAAoJEF2gSFkP1LMTIwkP/0V/8FstsWdqQyQgcAkEOuRp CH3pj1laoVjsKIVBfzcpVNk0oUPwp+16kTptWw0TD+RGFSWPyIwCphaSG85PN/NP DwYZkr9ZyhG4owEa3tp8bFI37V9NTeWxf4/+IwJC1g2OQOkfZC1kKA35M2TMO7I4 YeDh1asyCk8rCBkZ65ckIOqbwfk9nliNc8U2czamryioE5vqqlPdFQXTv4f8bvbz gQ4sqZHqXBgtF8Pc1aS4Y0RdRkliiWg4lxffJWfHUiEsVAXwJfIvmTjsIoWjlBhA XUfym/AxJ4NEkMD5n3TDqS4mxmsOQkAon6HLyY9tC1Bsn/4btmdSjKJdYE67EOY7 hKr0pOqEbSeuUGEDewNNApYlV+qhhp627CZDfJOPuYHyvN+DMKCj6ku2jbhfIjtJ f0QLUZaidleVjGZrWmxvab7E7rrD+nmA0sBqkrsuglCSPGNZy68lpMp2sR4vWObC HlOEkq7J/QA/OuvbrLXAsk47dwLVLxINMVbIWBLy2bQeLTvX5KVrNtI/OMCJLyXh 9vaD8boWI7iVfVQe1K+f1pWHlTdI2jPvRfwaKDDg081JKFdRAibaoVo0qWIozLKL RWEBEOHXhkeQ5qjQsAi2OBtaq5KJuFlO99qGXZbRiLkKvmPMXsYFAl99tQC2PtHX pEG+iztTc9c/6Xsj6REv =8+Bg -----END PGP SIGNATURE----- -- tor-talk mailing list - [email protected] To unsusbscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
