Transcript
Page 1: Hide your address t - users.encs.concordia.ca

Cognitive Walkthrough Example Tor

Tur s software tool

Anonymity when browsing the web

Hide your Ip address

tHeaps

i

i

IMeyYET

Page 2: Hide your address t - users.encs.concordia.ca

CTsks

Guidelines Heuristics

OOO

Ojargon

T 1 Install Tor

google itRikAnonymity sets

HarvardBrmb

Fingerprinting brows is

Page 3: Hide your address t - users.encs.concordia.ca

I

G ogled it

Download link

Installer start

suppressed

rag.it ri g

Page 4: Hide your address t - users.encs.concordia.ca

3 Good on 66

Grant on 68aware of

avoids clickthrough statusnot connectedatlas L y

62

68

A Default settingare good

Page 5: Hide your address t - users.encs.concordia.ca

Tur is blockedconnect hangs 6414514

68 x

Are we sure we are

on Tor

uncertainty 63.868no obvious user cue

67

ok interfileconflate Fr HTTPS

info

Javascript client scripting

dangerous as it can

leak IP address ofclient

Page 6: Hide your address t - users.encs.concordia.ca

as dangerous In Tall traffic anonym s

0

J03 anonym s

4 no just browser7 Os

nothinDA ares or not

Tur does not stop you from revealing your own

identity

CT 4 Disable close browser

Procedures PoliciesExample 2 Airport Security

Example 2 Same origin policy Browser

AirportstyPurchase the ticket

Tied to your name passport

E e IaTonfirmation

Page 7: Hide your address t - users.encs.concordia.ca

Go to the airport

skieced online

Register with Air Canada employeewebsiteKiosk

Input passportno picture check

Output boarding pass

DessertYJ

Baggage in

securith

no physical securitypaper holograms

BarcodigitalisationA line Kiosk try of info r

databasealmost certain security pointer x

on

pastor

Screeningdigital signatunknown

X ray machines

Dry sniffing It offLocked buy

FLEA

break the lockTSA special locks

personal keymuster K y s Tsaropens

all

Page 8: Hide your address t - users.encs.concordia.ca

Physical isolation of checked buys from

plane cabin

Pre screeningagent at start of security line

CT TSA

Boarding pass no passport

Convienceright gatetruck movement through airporttime stamp

screening agentSPOT Program

behavioural indicators