Avoid Browser Plugins Īvoiding browser plugins is better than using them.

However, if browser plugins are used then an isolating/transparent proxy like Whonix ™ is probably the safest option. In more precise terms, the risk of a virtual operating system being infected by trojan horses or other malware is higher.Īlways look for safer alternatives before utilizing a browser plugin (see below). Security: some plugins have a history of remote exploits.Fingerprinting: browser plugins most probably leak a lot of information about the (virtual) operating system (Whonix-Workstation ™).Linkability: browser plugin use can be probably correlated to the same pseudonym.Non-Free Software: - see the warning box above.The primary browser plugins concerns are: IP leaks are not easily possible see Attack on Whonix ™ and/or Design for details on how much effort would be needed. Although unrecommended, the knowledge of how to use browser plugins is not withheld from the reader. Also some popular plugins are closed source see Security in real world. Flash cookies) and they often have security vulnerabilities. This is still not recommended as they may decrease anonymity (e.g. Java, JavaScript, Flash, browser plugins and mis-configured applications cannot leak the user's real external IP address. Some popular plugins are non-free, closed source software! See Warning, Avoid non-Free Software before proceeding, particularly if the browser plugin is Free Software before using it.

Tor browser with flash player