Delivery-Date: Fri, 02 Jan 2015 15:06:45 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID,
	URIBL_BLOCKED autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 69E561E093A
	for <archiver@seul.org>; Fri,  2 Jan 2015 15:06:44 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 9775332919;
	Fri,  2 Jan 2015 20:06:40 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 90A65328BA
 for <tor-talk@lists.torproject.org>; Fri,  2 Jan 2015 20:06:36 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id iHA7ppiwv_EF for <tor-talk@lists.torproject.org>;
 Fri,  2 Jan 2015 20:06:36 +0000 (UTC)
Received: from mail-wg0-x244.google.com (mail-wg0-x244.google.com
 [IPv6:2a00:1450:400c:c00::244])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 45A9832618
 for <tor-talk@lists.torproject.org>; Fri,  2 Jan 2015 20:06:36 +0000 (UTC)
Received: by mail-wg0-f68.google.com with SMTP id b13so7876977wgh.7
 for <tor-talk@lists.torproject.org>; Fri, 02 Jan 2015 12:06:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=googlemail.com; s=20120113;
 h=message-id:date:from:user-agent:mime-version:to:subject:references
 :in-reply-to:content-type:content-transfer-encoding;
 bh=2gQy7xFQps2lvWf0ol8sNTSd6T2DnFzja6+aRBrRPrE=;
 b=DauNjWveHI0RSAjO86lHI1pz4drdfTOXk2wMqe2C7Qxd4cqQBQtpdricp/uxQ4XUkp
 23VzUI/3Co0k56oJ8NouGfx/ZXiiuc3otT+fsuny2J+TEOkndGM4QPIOmx+Iem1k3Jh0
 KzDXXbBm/9wne6izmMBV7Slaca1FG2Qyc143B/b4/fW3V+CbQNLS0PfUaE9eGUSPXZZo
 OXVn/KTqMBpgbPs3e4ip/6ymoo+UwshjSeB0R6drfQBBFQRAwTWuA/rlNY4w0ODa76Ab
 GGycgcrJkNfW9xBLZud+kW1h4xnKnBH2lvpo1nZ4MJtycciY191ki+ueeCmaDXjDnxyj
 dDnw==
X-Received: by 10.180.91.193 with SMTP id cg1mr879671wib.26.1420229193454;
 Fri, 02 Jan 2015 12:06:33 -0800 (PST)
Received: from [192.168.2.129]
 (dslb-188-100-174-120.188.100.pools.vodafone-ip.de. [188.100.174.120])
 by mx.google.com with ESMTPSA id ww4sm45526210wjc.47.2015.01.02.12.06.32
 for <tor-talk@lists.torproject.org>
 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Fri, 02 Jan 2015 12:06:32 -0800 (PST)
Message-ID: <54A6FA4B.3040709@googlemail.com>
Date: Fri, 02 Jan 2015 21:06:35 +0100
From: "Sebastian G. <bastik.tor>" <bastik.tor@googlemail.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:31.0) Gecko/20100101 Thunderbird/31.3.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <RT-Ticket-38223@torproject.org>,
 <COL131-W352C6534853D043E821266875F0@phx.gbl>,
 <rt-4.0.7-27168-1420189668-1623.38223-6-0@torproject.org>,
 <COL131-W317203A82CE0662FDAF28875D0@phx.gbl>
 <COL131-W44E4BCE88041B2AC2EFAF3875D0@phx.gbl>
In-Reply-To: <COL131-W44E4BCE88041B2AC2EFAF3875D0@phx.gbl>
Subject: Re: [tor-talk] [rt.torproject.org #38223] Firefox Web Shortcuts
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

02.01.2015, 20:29 Michael Fitzpatrick:
> Greetings Tor Talk,
> 
> I am a tor user with a question. I was encouraged by the Tor Project support team to send my question out to you all. 

That is strange. I was under the impression they would know.

Mostly because they are multiple individuals with a lot of combined
knowledge.

>>>
>>> I've come across a strange issue that the Firefox team has been unable
>>>    to solve thus far. I've already checked your FAQ and I didn't see
>>>    the answer in there. I'd like to be able to save web links to my
>>>    desktop as shortcuts. In Firefox, this ordinarily works by grabbing
>>>    the icon next to the URL and dragging it to the desktop. However,
>>>    I've discovered that the TorButton (and it alone) extension, when
>>>    enabled, will not allow shortcuts. Every time I drag the URL icon
>>>    from the awesome bar, nothing happens, and a little "can't do it"
>>>    symbol appears on the mouse icon.
>>>
>>> Can you tell me why Tor Button prevents saving shortcuts, and what the
>>>    work-around is for this feature? If it's just a design feature, I'd
>>>    recommend removing it on the next update, as I don't see the
>>>    security risks, and it'd be nice to be able to save weblinks as
>>>    desktop shortcuts. Thanks for your feedback!
>>>
>>> Sincerely,
>>> Michael
>>>

4.1. Proxy Obedience from
https://www.torproject.org/projects/torbrowser/design/

Quote Point 3:
<<<<Begin Quote>>>>
External App Blocking and Drag Event Filtering

External apps can be induced to load files that perform network
activity. Unfortunately, there are cases where such apps can be launched
automatically with little to no user input. In order to prevent this,
Torbutton installs a component to provide the user with a popup whenever
the browser attempts to launch a helper app.

Additionally, modern desktops now pre-emptively fetch any URLs in Drag
and Drop events as soon as the drag is initiated. This download happens
independent of the browser's Tor settings, and can be triggered by
something as simple as holding the mouse button down for slightly too
long while clicking on an image link. We filter drag and drop events
events from Torbutton before the OS downloads the URLs the events contained.
<<<<<End Quote>>>>>

The workaround I see is to create shortcuts manually. Obliviously it has
to be ensured TorBrowser handles those shortcut if that is supposed to
be the case. Maybe other's can find better ways.

Regards,
Sebastian
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

