You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I got rejected as spam twice from reporting this on the official tracker website.
If you right-click and copy an image inside Tor, the URL of the image, along with its metadata, is copied to the clipboard instead of just its data uri.
You can prove this by right-clicking an image inside Tor, clicking Copy Image, opening a file with a div like this in Brave, and pasting the image into it:
<divcontenteditable=true></div>
The image will be pasted inside the div, and if you inspect the element you will see something like this:
This implies that by pasting the image into a non-Tor browser, the browser you pasted it into downloaded the image from the same URL you visited "privately" while in Tor.
This is very unexpected since there is a separate Copy Image Location option, and most people clicking Copy Image expect to copy the image, NOT its metadata, and certainly not its URL.
Copying the URL largely defeats the purpose of using Tor in the first place, plus any program with access to the clipboard can now see the URL as well.
The text was updated successfully, but these errors were encountered:
I got rejected as spam twice from reporting this on the official tracker website.
If you right-click and copy an image inside Tor, the URL of the image, along with its metadata, is copied to the clipboard instead of just its data uri.
You can prove this by right-clicking an image inside Tor, clicking
Copy Image
, opening a file with a div like this in Brave, and pasting the image into it:The image will be pasted inside the div, and if you inspect the element you will see something like this:
This implies that by pasting the image into a non-Tor browser, the browser you pasted it into downloaded the image from the same URL you visited "privately" while in Tor.
This is very unexpected since there is a separate
Copy Image Location
option, and most people clickingCopy Image
expect to copy the image, NOT its metadata, and certainly not its URL.Copying the URL largely defeats the purpose of using Tor in the first place, plus any program with access to the clipboard can now see the URL as well.
The text was updated successfully, but these errors were encountered: