From qubes-users Thu Sep 19 08:15:00 2019 From: Patrick Schleizer Date: Thu, 19 Sep 2019 08:15:00 +0000 To: qubes-users Subject: Re: [qubes-users] whonix-15 TB in dvm on Safest has whitelisted sites in NoScript by default Message-Id: <5d283bda-6150-8cbe-acce-5cc39c384d75 () whonix ! org> X-MARC-Message: https://marc.info/?l=qubes-users&m=156888095819604 Whonix source code doesn't write literally googlevideo, netflix, outlook, etc. anywhere. It does not do anything to give special treatment to any websites. By policy, for simplicity, clean implementation and whatnot, the "inside" of Tor Browser isn't modified by Whonix. This is elaborated here: https://www.whonix.org/wiki/FAQ#Does_Whonix_Change_Default_Tor_Browser_Settings.3F Tor Browser upstream issue. Bug report written just now. wipe all mentions of netflix, paypal, youtube, ... from noscript in Tor Browser https://trac.torproject.org/projects/tor/ticket/31798 See also: https://www.helpnetsecurity.com/2015/07/01/researchers-point-out-the-holes-in-noscripts-default-whitelist/ https://thehackerblog.com/the-noscript-misnomer-why-should-i-trust-vjs-zendcdn-net/ From noscript FAQ: Q: What websites are in the default whitelist and https://noscript.net/faq#qa1_5 Q: What is a trusted site? https://noscript.net/faq#qa1_11 Whonix forum discussion: https://forums.whonix.org/t/noscript-with-security-slider-at-safest-permits-around-30-sites/8160 Cheers, Patrick -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5d283bda-6150-8cbe-acce-5cc39c384d75%40whonix.org.