[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
From: Max Jakob Maass <max@xxxxxxxxxxxxx>
Date: Tue, 21 Jan 2014 15:53:39 +0100
Delivered-to: archiver@xxxxxxxx
Delivery-date: Tue, 21 Jan 2014 10:12:38 -0500
Dkim-signature: v=1; a=rsa-sha1; c=relaxed/relaxed; t=1390316382; l=1498; s=domk; d=velcommuta.de; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:References: Subject:To:MIME-Version:From:Date:X-RZG-CLASS-ID:X-RZG-AUTH; bh=KnnD9mIJlOOwJYeQqycp3C86/nE=; b=Q0+3eQmFnh1gUK5AEs79NthODf5x2gkZn8744/fYqSjWDr0XydpWLDxbetgIL9B3+MS p27XiVI6zUrVagRrQWKoPwjgQj6Ph02jQb932rQ7hFIywSqqUECrdZ5QxydNQup1OF+2p G7m9SxQcIgLykSVj7rGNDQs44q5dEBiBZ+k=
In-reply-to: <52DE87FF.50507@xxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
Openpgp: url=http://verify.velcommuta.de/gpg/3408825E.asc
References: <1390277171.428385.27196.8353@xxxxxxxxxxxxxxx> <52DE4C43.1060109@xxxxxxxxx> <52DE5C45.3030107@xxxxxxxxxx> <52DE658D.10809@xxxxxxxxxxxxx> <52DE87FF.50507@xxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

> Also, it'd be nice if http://tortestprivacy.url.ph/ would allow
> tweaking the full URL (rather than just port number) for public
> testing purposes. Could you perhaps help with that, TT Security?
> :)
I'm not TT Security, but you can use my version:
http://62.141.42.149/test.php

It's not very pretty, but it is only a minor modification of the
original that includes this ability.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=t6Wp
-----END PGP SIGNATURE-----
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
  - From: Max Jakob Maass

References:
- [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
  - From: TT Security
- Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
  - From: Yuri
- Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
  - From: Olivier Cornu
- Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
  - From: Max Jakob Maass
- Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
  - From: Olivier Cornu

Prev by Author: Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
Next by Author: Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
Previous by thread: Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
Next by thread: Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default
Index(es):
- Author
- Thread