[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #12820 [Tor bundles/installation]: Test+Recommend Tor Browser with Enhanced Mitigation Experience Toolkit
#12820: Test+Recommend Tor Browser with Enhanced Mitigation Experience Toolkit
-------------------------------------+-------------------------------------
Reporter: mikeperry | Owner: erinn
Type: project | Status: accepted
Priority: normal | Milestone:
Component: Tor | Version:
bundles/installation | Keywords: tbb-security, tbb-isec-
Resolution: | report
Actual Points: | Parent ID:
Points: |
-------------------------------------+-------------------------------------
Comment (by cypherpunks):
Currently, ROP Simulate Execution Flow (SimExecFlow) does not work with
Tor Browser 4.5.1, 4.5, and the last 4.0 release (4.0.8?). The last time
it worked was in the 3.5 series if I remember correctly (and possibly one
of the first 4.0 releases). Please note I am talking about releases, I
have never tested any betas.
Turning SimExecFlow off for *\Tor Browser\Browser\firefox.exe fixes the
problem. *\tor.exe and *\Tor Browser\Browser\plugin-container.exe work
fine with it enabled. I have not tested *\Start Tor Browser.exe or
*\obfsproxy.exe.
I run other versions of Firefox (64-bit nightly, 64-bit beta, 32-bit
release, 32-bit release with DRM removed, portable firefox) and these work
fine with SimExecFlow on. I have not tested any ESR, however.
I have also not tested running Tor Browser in safe mode.
All other mitigations work fine (be sure to add "mozjs.dll;xul.dll"
without quotes to the EAF+ mitigation).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12820#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs