Thus spake Marco Bonetti (sid77@xxxxxxxxxxxx): > I did some quick tests with TBB on Linux, versions 0.2.33-2 and 0.2.33-3. > In both cases I get these results: > 1) https://check.torproject.org/ - no warning > 2) https://check.torproject.org/?lang=en-US&small=1 - warning Yes, we made this page warn because all TBBs fetching it without adding uptodate=1 were assumed to be the old, vulnerable versions. In hindsight, what we should have done was also create a small=2 page with no warning, for use as the default in new TBBs when the versions file is inaccessible. I didn't expect this case to happen, but I also didn't expect deployment of #4222 to span 24 hours.. > 3) https://check.torproject.org/?lang=en-US&small=1&uptodate=1 - no warning > > 2 was the home page used in TBB 0.2.33-2 > 3 is the newer home page used in TBB 0.2.33-3 > > Ciao, > Marco > > -- > Marco Bonetti > Tor research and other stuff: http://sid77.slackware.it/ > Slackintosh Linux Project Developer: http://workaround.ch/ > Linux-live for powerpc: http://workaround.ch/pub/rsync/mb/linux-live/ > > My GnuPG key id: 0x0B60BC5F > _______________________________________________ > tor-talk mailing list > tor-talk@xxxxxxxxxxxxxxxxxxxx > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk -- Mike Perry Mad Computer Scientist fscked.org evil labs
Attachment:
pgpjQYbXSQX3R.pgp
Description: PGP signature
_______________________________________________ tor-talk mailing list tor-talk@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk