brmlab

User Tools

Site Tools

You are here: Hackerspace Prague » Projects » Spyzilla
project:spyzilla

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
project:spyzilla [2021/02/11 04:09] – [Thunderbird] format: force more wrap as the page is still broken jendaproject:spyzilla [2022/12/24 16:23] (current) – [Thunderbird] jenda
Line 230: Line 230:
 } }
 </code> </code>
 +
 +==== Attachments ====
  
 When you open an attachment (tested with PDF), the following request is sent, leaking username, profile name, attachment filename and attachment SHA-256 hash (as raw binary data in the middle): When you open an attachment (tested with PDF), the following request is sent, leaking username, profile name, attachment filename and attachment SHA-256 hash (as raw binary data in the middle):
Line 255: Line 257:
 000000f0  2e 70 64 66 50 00 5a 05  65 6e 2d 55 53           |.pdfP.Z.en-US| 000000f0  2e 70 64 66 50 00 5a 05  65 6e 2d 55 53           |.pdfP.Z.en-US|
 </code> </code>
-To disable this, remove browser.safebrowsing.downloads.remote.url in about:config. [[https://searchfox.org/mozilla-central/source/toolkit/components/reputationservice/ApplicationReputation.cpp#1711|Link to source where this happens.]]+To disable this, remove browser.safebrowsing.downloads.remote.url in about:config. [[https://searchfox.org/mozilla-central/source/toolkit/components/reputationservice/ApplicationReputation.cpp#1564|Link to source where this happens.]]
 ===== Firefox for Android ===== ===== Firefox for Android =====
  
project/spyzilla.1613016552.txt.gz · Last modified: 2021/02/11 04:09 by jenda