[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Thunderbird leak

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] Thunderbird leak
From: "Runa A. Sandvik" <runa.sandvik@xxxxxxxxx>
Date: Sun, 26 Jan 2014 18:07:14 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sun, 26 Jan 2014 13:11:39 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=lDyobMLoTPXZ8/yP7IwmwiLeyUnRbv/R2LGKSCThwNg=; b=vTm6iC2d3ov1yKgUiri4a8+bvSEDs28q7vU0GGS1CCe17CcFWiLDlQjcNNpl11WzJi sUKe8On1Mf0W28EMUT0l0rWEORFq9S9sqe4+IgwTTsyUDrvWwUigsx2rSmIvuV2+JsQ4 USVMlRYRmUpBu/UCUadAkRHb1WnIT9M1IKIL+4A/yk4fDt0hUrgHtJeujvUbbfhGCZZ+ F8yGEeX4cQHzcJPtykGa5NAJeqtesC4bZM0VjhDCcdJIB5VhQlE4LOM8NcHTdXcawjbM mTb6EALznrz15/CjaUWpfa0W3u77cSWD08Aw4PsoKC8NDjMUgMLMkDvnaDf8IOpNVIpr aiYw==
In-reply-to: <20140126150653.GA13075@xxxxxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <20140126150653.GA13075@xxxxxxxxxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>

On Sun, Jan 26, 2014 at 3:06 PM, Mike Cardwell <tor@xxxxxxxxxxxxxxxxxx> wrote:
> I just blogged about a general security issue in Thunderbird which may
> also affect people who are using Tor:
>
> https://grepular.com/Security_Bug_Thunderbird_Websites_Tabs
>
> Basically, an email can be crafted such that when you click a link in
> that email it is opened within a Thunderbird tab instead of in your
> usual (potentially torified) web browser. Bypassing any other defenses
> you might also have, including NoScript etc.

I'd be curious to know if this still works if you have TorBirdy [1]
installed. TorBirdy is a Thunderbird extension which configures the
software to make connections over the Tor network.

[1]: https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/

-- 
Runa A. Sandvik
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Thunderbird leak
  - From: Sukhbir Singh

References:
- [tor-talk] Thunderbird leak
  - From: Mike Cardwell

Prev by Author: Re: [tor-talk] Harvard student used Tor to send bomb threats, gets caught by old-fashioned policework
Next by Author: Re: [tor-talk] oftc must be destroyed
Previous by thread: Re: [tor-talk] Thunderbird leak
Next by thread: Re: [tor-talk] Thunderbird leak
Index(es):
- Author
- Thread