Delivery-Date: Thu, 10 Mar 2016 09:09:56 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	FREEMAIL_FROM,RCVD_IN_DNSWL_MED,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id A48131E09F6;
	Thu, 10 Mar 2016 09:09:54 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id CEE1C39AF6;
	Thu, 10 Mar 2016 14:09:50 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 0740C39B6D
 for <tor-talk@lists.torproject.org>; Thu, 10 Mar 2016 14:09:47 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 5BEVAh0LIkSx for <tor-talk@lists.torproject.org>;
 Thu, 10 Mar 2016 14:09:46 +0000 (UTC)
Received: from pitango.safe-mail.net (pitango.safe-mail.net [212.29.227.82])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id C310D39AD0
 for <tor-talk@lists.torproject.org>; Thu, 10 Mar 2016 14:09:46 +0000 (UTC)
Received: by pitango.safe-mail.net with Safe-mail (Exim 4.84)
 (envelope-from <some_guy123@Safe-mail.net>) id 1ae1Ha-0003UJ-LI
 for tor-talk@lists.torproject.org; Thu, 10 Mar 2016 09:09:42 -0500
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=N1-0105; d=Safe-mail.net;
 b=gERsRSv6bmdfuRmzHC28q9JF95YF6jQIVA34o/ZBucXc9kZQRK7k1nO/f3vfhHlz
 XJzypY6KfyKvqJF7+RSAuDqHrHDZvK10Y4qqQ7rUn4VqksHaf9KZWDNkExjuSqF6
 iPBLZ3TX2nkdej/MrTUQ0PB85/2cV47a+96yPUUF71s=;
Received: from pc ([188.126.81.155]) by Safe-mail.net with https
Date: Thu, 10 Mar 2016 09:09:42 -0500
From: some_guy123@Safe-mail.net
To: tor-talk@lists.torproject.org
X-SMType: Regular
X-SMRef: N1P-_hbMk2_L3v
Message-Id: <N1P-_hbMk2_L3v@Safe-mail.net>
MIME-Version: 1.0
X-SMSignature: AprxQ+iyUrMiA8igM0UvaUM38GHH9Czp4HTmE6ky/mF315OwnUrGRrUde6vhZEqH
 tnnGKShywmYkp0uIJvrlatx4VNraZzKdUPF2qA9ZCSqb6w+xvLJK4pw7Quqx9rMf
 DGtDnlEbxKntvS4+oZu3G53yi94GZ68BBXteVTVnr7s=
Subject: Re: [tor-talk] Question about Circuit Separation
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Circuit isolation should prevent the issue mentioned in your links. 

However, Tor Browser sends referrers which can link circuits that should be isolated:
https://trac.torproject.org/projects/tor/ticket/16920

Even if the referrer is fairly generic, the timestamp for visiting something plus a small amount of browser fingerprinting (the platform, some GUI configuration options, the browser window size, non-standard addons, ...) will still allow for good correlation.

Some browser actions may link different tabs:
https://trac.torproject.org/projects/tor/ticket/18272

Tor Browser may keep cookies for a long time:
https://trac.torproject.org/projects/tor/ticket/18382

These cookies can be used in conjunction with the referrer issues to crosslink unrelated tabs that opened links to the same target domain.

It's best not to rely on the circuit isolation - use separate browsers.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

