Delivery-Date: Sun, 30 Nov 2014 10:42:05 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 6BBD51E019C;
	Sun, 30 Nov 2014 10:42:04 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 9B7C32F42D;
	Sun, 30 Nov 2014 15:41:58 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 7D3AD291F7
 for <tor-talk@lists.torproject.org>; Sun, 30 Nov 2014 15:41:54 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 3MK2ZWUhijWS for <tor-talk@lists.torproject.org>;
 Sun, 30 Nov 2014 15:41:54 +0000 (UTC)
Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com
 [66.111.4.25])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 6176328633
 for <tor-talk@lists.torproject.org>; Sun, 30 Nov 2014 15:41:54 +0000 (UTC)
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
 by mailout.nyi.internal (Postfix) with ESMTP id 9C528207E2
 for <tor-talk@lists.torproject.org>; Sun, 30 Nov 2014 10:41:51 -0500 (EST)
Received: from frontend2 ([10.202.2.161])
 by compute4.internal (MEProxy); Sun, 30 Nov 2014 10:41:51 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=
 messagingengine.com; h=x-sasl-enc:message-id:date:from
 :mime-version:to:subject:references:in-reply-to:content-type
 :content-transfer-encoding; s=smtpout; bh=AhSzCfhznRhmgOftnUIH+E
 updUg=; b=di/GFxzlDEY6+lMUAO50kj2qIPI2eD3M2amsU3/LG4VmWK0Mo+wsvK
 NFMySyw5zPylR7ZepHwHs62UFxnbywuQrJuCpT930Z7gDOGfEyflG4jrtEmeznCW
 2m9JpzSuWjkC9qxifNJUAgVSMqNXFTrScKe7Y95j2KYVok8JDDvo4=
X-Sasl-enc: XJw+aXbZzmpeLqGNBtBDXt2Z3XrP6yoiJigv7xYStMED 1417362111
Received: from [50.84.162.181] (unknown [50.84.162.181])
 by mail.messagingengine.com (Postfix) with ESMTPA id 462506800FE
 for <tor-talk@lists.torproject.org>; Sun, 30 Nov 2014 10:41:51 -0500 (EST)
Message-ID: <547B3ABE.2050909@dasyatidae.net>
Date: Sun, 30 Nov 2014 09:41:50 -0600
From: Drake Wilson <drake@dasyatidae.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Icedove/31.2.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <5478A68F.2030509@web.de>
 <CAC-Vat7Pvbrg9-Vy1_Gp3K3E1=AhanKSFi+pSqZbJv7UbN1-rw@mail.gmail.com>
 <5478B223.6030502@web.de> <20141128201924.52497A00FC@smtp.hushmail.com>
 <5479F7C6.1090905@web.de> <5479FDBE.5070703@dasyatidae.net>
 <547ADC75.4050801@web.de>
In-Reply-To: <547ADC75.4050801@web.de>
Subject: Re: [tor-talk] Once again: window size
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Hartmut Haase wrote:
> Hi Drake,
> I understand what you are saying. If it helps to be more anonymous that's o, k.
> Does that mean if I make the window full screen I'm losing          anonymity?

Yes, it does potentially mean that.  It is not a complete loss, and may not
_directly_ reveal any other details, but it adds a unique element.  If websites or
exit nodes or spies see more than one page load using your monitor resolution and
not the Tor Browser default size, they can guess that those are more likely to be
the same person.  And if you reveal personal information on one website using an
unusual window size, and then access another website the same way, they can work
together to guess that it was you who did the second access.  If you access the
websites using an insecure channel (such as plain HTTP and not always HTTPS),
anyone who can observe the traffic from your exit nodes can also guess.

The specific analysis depends on your specific situation and what kind of anonymity
you need.  But you should use the default window size if you can.  Of course, you
should also be careful in all other ways.

>> I do not know why you see a delay of one second.
> Just do the following: start Tor Browser, and make the window full screen.
> Then log out and log in again or restart the PC. The next start of Tor Browser
>  will come up with a full screen window only to switch back to default after a second or two.

It is probably just while the Firefox part of the software is creating the
window, before the Tor Browser part can resize it.  Possibly on a faster
computer there is very little delay.  I don't have a copy of Tor Browser with me,
unfortunately.  How fast is your CPU?  How much RAM do you have?

(Developers: is that a known potential race condition vs the user beginning input?
I'm guessing the window hook from the design draft doesn't allow blocking the UI.)

   ---> Drake Wilson

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

