Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5451
| From | Anonymous <nobody@remailer.paranoici.org> |
|---|---|
| Newsgroups | linux.debian.security |
| Subject | Tor Browser 8.0 sends OS+kernel+TOTAL_PING_COUNT!! |
| Date | 2018-09-22 00:30 +0200 |
| Message-ID | <wAC5Y-5dO-7@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
Tor Browser 8.0 sends OS+kernel+TOTAL_PING_COUNT in update queries to Mozilla - Tails 3.9, which ships with TB 8.0, is also affected. ###### User report:[1] https://blog.torproject.org/comment/277375#comment-277375 - Sanitize the add-on blocklist update URL https://trac.torproject.org/projects/tor/ticket/16931 related, old, closed ticket (unresolved): - TBB-Firefox sends OS+kernel in update queries to Mozilla https://trac.torproject.org/projects/tor/ticket/6734 related, old, closed ticket (also unresolved): - Nasty MitM possibility with the Firefox blocklist service https://trac.torproject.org/projects/tor/ticket/22966 [1]: "TBB-Firefox sends Linux kernel version in extensions blocklist update queries to Mozilla. 6 years old ticket closed https://trac.torproject.org/projects/tor/ticket/6734 without fix this privacy issue. >From Ubuntu 18.04.1 LiveCD /v1/blocklist/3/%7Bec8030f7-c20a-464f-9b0e-13a3a9e97384%7D/60.2.0/Firefox/20180204030101/Linux_x86_64-gcc3/en-US/release/Linux 4.15.0-29-generic (GTK 3.22.30 libpulse 11.1.0)/default/default/1/1/new/" "about:config extensions.blocklist.url" "Also it send TOTAL_PING_COUNT to tell mozilla how many days you use TBB." ###### WTF?
Back to linux.debian.security | Previous | Next | Find similar | Unroll thread
Tor Browser 8.0 sends OS+kernel+TOTAL_PING_COUNT!! Anonymous <nobody@remailer.paranoici.org> - 2018-09-22 00:30 +0200
csiph-web