[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default




Hi Olivier,

21 ÐÐÐÐÑÑ 2014 Ð. 11:38:54 ÐÐÐÑÐÐÐÐÑÐÐÑ Olivier Cornu (o.cornu@xxxxxxxxxx) ÐÐÐÐÑÐÐ:

instead of allowing non-Tor connections to LAN hosts, supposedly because
they are safe, it should block them as a default.


Absolutely agree with you!
Just let not treat it as BUG but as some security issue even if only potentially dangerous.
ABE of NoScript can close this issue - simply and quickly. But maybe in the future TBB must prohibit all connections to local LAN resources for global html web-pages.
----
Regards,
TT Security.
--
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk