[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #9387 [Tor Launcher]: Tor Launcher/Torbutton should provide a "Security Slider"

#9387: Tor Launcher/Torbutton should provide a "Security Slider"
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  gk
  mikeperry              |     Status:  closed
         Type:           |  Milestone:
  enhancement            |    Version:
     Priority:  major    |   Keywords:  tbb-security, tbb-usability, tbb-
    Component:  Tor      |  linkability, tbb-3.0, extdev-interview, tbb-
  Launcher               |  isec-report, tbb-4.5-alpha,
   Resolution:  fixed    |  TorBrowserTeam201503
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------
Changes (by mikeperry):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Ok, this is pushed! Everything should be good to go for TBB 4.5a5 here.

 Also, as far as I can tell, the "Medium Low" position of the security
 slider would have prevented one pwn2own bug (https://www.mozilla.org/en-
 US/security/advisories/mfsa2015-29/), and "Medium High" would have
 prevented non-https pages from exploiting the second
 (https://www.mozilla.org/en-US/security/advisories/mfsa2015-28/). The
 "High" position would have prevented https://www.mozilla.org/en-
 US/security/advisories/mfsa2015-28/ entirely (both by disabling JS, and by
 disabling SVG).

 So good work, everybody!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9387#comment:103>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs