Comments URL: https://news.ycombinator.com/item?id=45344180

Points: 2

# Comments: 1

Comments URL: https://news.ycombinator.com/item?id=44969767

Points: 26

# Comments: 0

So what's different this time?

(Upon further examination, the 2019 team at the National Defense Medical College also had Dr Hiromi Sakai. So why is this news now?)

Comments URL: https://news.ycombinator.com/item?id=43200679

Points: 18

# Comments: 0

  1. The attacker knows the time and medium through which the two persons call each other, and have control over the medium, being able to inject themselves;
  2. The attacker coerces one of the two persons to perform authentication.

This is the explanation that the AIs gave me:

# begin explanation The issue you're experiencing with QR codes showing up as vertical stripes in the Tor browser when using QRCode.js is due to Tor Browser's anti-fingerprinting feature.

Tor Browser is designed to protect user privacy, and one of the ways it does this is by randomizing the output of the HTML5 Canvas API. QRCode.js uses the Canvas API to draw QR codes. When Tor Browser randomizes the Canvas output, it distorts the QR code image, causing it to appear as vertical stripes instead of a readable QR code.

This is a known issue and is intentional behavior in Tor Browser to prevent fingerprinting. Fingerprinting is a technique websites use to uniquely identify and track users based on various browser characteristics, including how the browser renders content like Canvas elements.

Here are the solutions based on my research:

Lower Tor Browser's Security Level: The simplest workaround is to temporarily lower Tor Browser's security level from "Safer" or "Safest" to "Standard". You can do this in Tor Browser's settings under "Privacy & Security" -> "Security Level". Setting it to "Standard" disables the Canvas fingerprinting protection, which should allow QRCode.js to render QR codes correctly. However, this will slightly reduce your privacy while using Tor Browser.

Use a Different Browser: If you need to generate QR codes reliably and use them, the most straightforward solution is to use a different browser like Safari, Firefox, or Chrome, as you've already observed that the QR codes work correctly in these browsers. You can use a non-Tor browser specifically for generating and scanning QR codes, and then switch back to Tor Browser for your privacy-sensitive browsing.

Advanced Configuration (Not Recommended for Most Users): For advanced users, it might be possible to modify Tor Browser's about:config settings to disable specific anti-fingerprinting measures related to Canvas, such as canvas.poison or privacy.resistFingerprinting. However, this is strongly discouraged unless you fully understand the privacy implications, as it can weaken Tor Browser's privacy protections. It's generally better to use one of the first two options.

In summary, the striped QR code issue is a trade-off between strong privacy protection and website functionality in Tor Browser. Tor prioritizes privacy by randomizing Canvas output, which unfortunately breaks some features like QR code generation using libraries like QRCode.js. The recommended solutions are to either temporarily lower the security level in Tor Browser or use a different browser for QR code related tasks. # end explanation

As well as the proposed solution: # begin solution The issue with QR codes appearing as vertical stripes in Tor Browser when using QRCode.js is due to Tor Browser's anti-fingerprinting feature, which randomizes the Canvas API output. This intentional behavior to protect privacy disrupts QRCode.js's ability to render QR codes correctly.

Solutions include:

1. Lowering Tor Browser's security level to "Standard".

2. Using a different browser for QR code generation.

3. Advanced users can modify `about:config` settings, but this is not recommended.

The recommended solutions are to temporarily lower the security level in Tor Browser or use a different browser for QR code related tasks. # end solution