13

I want to begin to use Tor Browser (on Windows) but before I need to know some issues. I have read Tor's six pillars and one of that is "Don't enable or install browser plugins". So my doubt is: does it include "normal" add-ons?

With "normal" addons I refer to extensions like Diigo Extension, Buffer, Zotero, Color Picker... I need some of them to work and improve my self-management.

Everything I have read is about plugins: VLC, RealPlayer, Flash, Java... But nothing about Firefox Add-ons.

cacahuatl
  • 11,047
  • 2
  • 17
  • 39
Ivanhercaz
  • 233
  • 1
  • 2
  • 6

3 Answers3

7

The worst thing that can happen is that the add-on tries to access the internet and doesn't use Tor.
--> that will destroy your anonymity and release your real IP address!

Hopefully the worst thing will not happen, but what definitely happens is that you(r browser) will get more trackable with every additional add-on!


Here are some tests to see how unique your profile is and what can/will be tracked:

...to be really save i would suggest to use Tails!
the related FAQ of Tails about this topic: "Can I install other add-ons in Tor Browser?"

DJCrashdummy
  • 712
  • 8
  • 30
3

As of https://superuser.com/questions/137931/can-websites-see-my-firefox-addons, there is no default API to detect addons, as there is for plugins. As stated, malicious addons can certainly decloak you, but normal, heavily-used addons should have received some vetting, so should be a bit more trustworthy.

I have not examined the addons you listed, though.

serv-inc
  • 387
  • 1
  • 18
1

Just keep in mind that whether you use plugins or addons, many of them perform background operations communicating with remote servers. Unless you know exactly where the traffic is going and coming from as well as the transport layer being used to transmit and receive the data associated with the plugin or addon, you can't be sure that what is passing to and from your system is being channeled through tor and the corresponding relays. Without knowing all of that, it's best to keep the plugin and addon usage down to a minimum if using at all. I would recommend to refrain from using any while navigating with/through tor, and revisit where you can later with the standard browser when not connected through the tor network if you want or need to used any plugins or addons. Of course that would exclude any tor specific network locations such as .onion sites, but I'm sure you'd hate to expose yourself when you're trying to be anonymous. It's definitely a sticky situation, but always better to exercise caution when unsure (aka better safe than sorry). Some of the comments above are really useful such as reviewing a short list of must-have add-ons to keep them down to a minimum and to know that they are safe. ~RM

HoundCat
  • 11
  • 2