If you’ve ever looked at the results of running vnc over ssh over Tor
you wouldn’t say this.
Based on your proposal:
Does the remote Tor Browser run JS? - Yes.
Does one interact with that TB through mouse and keyboard? - Yes.
Can GitHub receive that user input through that remote TB? - Yes.
What has VNC over SSH to do with any of that?
You have to trust someone.
Why should anyone trust a mid man if the goal is secure communication between 2 hosts over TLS?
Can you be specific about where you think the risk lies here? Do you
think the service provider will be sniffing your GitHub credentials? To
what end?
unman, is that you, a respected developer of one of the most secure OS, or has someone hacked your account? I am quite confused by the level of your questions.
Oh, well, I’ve obviously been misled by the title of this thread, the
initial posts, and the repeated references to having to use Javascript.
I have not set that title.
Your response here isn’t helpful. Can you set out exactly what you
think the issue is, and how it affects users. At this stage I really
am lost, and if we are to understand the issue, (or issues), then we need
a clear statement of what it is. Absent that, there’s no possibility of
identifying a solution.
The issue is privacy/anonymity and the ways it is reduced by GitHub’s changes. This discussion started as reply to your:
- Some users want to remain anonymous. […] Perfectly possible to work on GitHub anonymous and over Tor.
Since then, I have explained multiple times why this is not true. Others mentioned that not only JS but also CSS can be involved in the process of tracking one’s interaction patterns. Other issues were also mentioned along the way, including the security/accessibility of the project code, being hosted with a PRISM company, involved in censorship etc. (I can’t repeat everything)
I have also proposed to use web forms for anonymous submissions, which is a workaround (and not a solution) to some of the challenges.