[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Warning to NoReply.org DEB Package Users

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Warning to NoReply.org DEB Package Users
From: Florian Reitmeir <florian@xxxxxxxxxxxx>
Date: Sat, 11 Aug 2007 16:10:28 +0200
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Sat, 11 Aug 2007 10:07:12 -0400
In-reply-to: <21f144250708101506u2ff1671fl654d90d13547a60f@xxxxxxxxxxxxxx>
References: <3922422b0708101312h7a7c55cbw64390628cc7e2786@xxxxxxxxxxxxxx> <20070810210559.GG21473@xxxxxxxxxxxxxxx> <21f144250708101506u2ff1671fl654d90d13547a60f@xxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: Mutt/1.5.13 (2006-08-11)

On Fri, 10 Aug 2007, Kyle Williams wrote:

> This is not true.  The affects of the bug are very sever, and it DOES NOT
> require the config to be saved!  An attacker could still cause you to loose
> your anonymity.
> UPDATE, UPDATE, UPDATE.

like i wrote before, you are only vunerable if you have the following
conditions:

- open control port
- for the tor process writeable config file

And the versions online are all up to date, so in doubt just upgrade.

If you use an Tor GUI, i _really_ recommended to upgrade.

-- 
Florian Reitmeir

Follow-Ups:
- Re: Warning to NoReply.org DEB Package Users
  - From: Ringo Kamens

References:
- Warning to NoReply.org DEB Package Users
  - From: Ringo Kamens
- Re: Warning to NoReply.org DEB Package Users
  - From: Florian Reitmeir
- Re: Warning to NoReply.org DEB Package Users
  - From: Kyle Williams

Prev by Author: Re: Warning to NoReply.org DEB Package Users
Next by Author: Re: ModSecurity v2 Apache rules for directory servers
Previous by thread: Re: Warning to NoReply.org DEB Package Users
Next by thread: Re: Warning to NoReply.org DEB Package Users
Index(es):
- Author
- Thread