Thus spake Jacob Appelbaum (jacob@xxxxxxxxxxxxx): > I'm pleased to say that Sukhbir, tanaq, and I are making progress on > Torbutton-birdy, the Torbutton like plugin for Thunderbird. Today marks > the second release with two important fixes: I say we just call it TorBirdy. Easier to type, and has a better ring to it I think. Hopefully, Torbutton will soon be entirely forgotten in favor of Tor Browser, anyways :). > the auto-configuration wizard leaks, so we disabled it > the timezone is now UTC and does not leak your actual timezone > > You may download the xpi here: > https://github.com/downloads/ioerror/torbutton-birdy/torbutton-birdy.xpi > > We had around 57 downloads for our first release, we'd love to see that > many users upgrade and send us feedback. We're really looking for > informational leaks but the most important kinds of leaks are proxy > bypass or other kinds of seriously harmful bugs. > > Here is our long running open bug about reviewing torbutton-birdy: > https://trac.torproject.org/projects/tor/ticket/5797 I already mentioned this in the ticket, but might as well say it here too, in case people don't bother to click the link: Attachments can also cause proxy bypass when external apps are launched to open them, esp for doc and pdf attachments. It would be great if someone could test trying to open those attachments, especially after setting the prefs I mention in: https://trac.torproject.org/projects/tor/ticket/5797#comment:12. If the prefs don't cause a warning of some kind first, you might need to adapt that component I linked to in comment 11... -- Mike Perry
Attachment:
signature.asc
Description: Digital signature
_______________________________________________ tor-talk mailing list tor-talk@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk