connectoriop.blogg.se

JavaScript is really dangerous, but if you really need it, at least only enable it for specific websites (for Firefox you may use NoScript, built-in solutions exist for Konqueror and, I believe, Opera), and, if you are not using Torbutton, be careful about switching off Tor. The Torbutton FAQ says it protects you against scripts that continue running when you switch between using Tor and direct connection, not from all that. Fortunately the information disclosed in this way does not include your IP address. This is potentially fixable, if JavaScript could be told to fake this information, but the above two problems remain. * JavaScript will volunteer a wide variety of information about you, including your screen size, that will make you much less anonymous. If you enable JavaScript, you will have to ensure these things are blocked separately. * Dangerous things like Java and Flash are often wrapped in JavaScript. The spyware can then compromise your anonymity. An advanced attacker might exploit these vulnerabilities to install spyware on your computer.

* Poor JavaScript implementations often allow buffer overflow attacks. JavaScript can be dangerous in a few different ways: