[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-talk] Warning to TorBirdy users: system language leak in replies (via authorwrote line)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Due to a change in Thunderbird's handling of the
"reply_header_authorwrote" prefs [1] TorBirdy users which use
Thunderbird 31 and later leak their system language to recipients* of
reply messages.
Usual TorBirdy quoting behaviour when composing a reply looks like
this (author name is not followed with "wrote"):
John Doe:
> .....
leak ("wrote" in the case of an English system) introduced with newer
Thunderbird versions:
John Doe wrote:
> .....
Whether the system language is actually leaked depends on the content
of the email body. If the sender (you) manually remove the entire text
in the composing window - the "authorwrote" line is not included and
no leak occurs.
*) If the message has not been end-to-end encrypted this leak is not
limited to the intended recipients.
Workaround
- ----------
Until TorBirdy gets ready for Thunderbird versions >= 31
affected users may set the following preference to avoid this leak:
mailnews.reply_header_authorwrotesingle = #1:
[1]
https://bugzilla.mozilla.org/show_bug.cgi?id=1009585
https://bugzilla.mozilla.org/show_bug.cgi?id=995797
[2] https://trac.torproject.org/projects/tor/ticket/13480
-----BEGIN PGP SIGNATURE-----
iF4EAREKAAYFAlREOXEACgkQgSFXpOdJgOsLoAEAvA3PQMKCm6u5Yooo2cV9Mmci
wNbIpwNZLWH8qoJQqbMBAMIxHPcO72miTE+0N3+/pwcdL3Syl6bwg0Q30vO8ELEE
=RKu7
-----END PGP SIGNATURE-----
--
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk