tbb-dev

tbb-dev@lists.torproject.org

447 discussions

sandboxed-tor-browser system tor instance discouraged?
by Patrick Schleizer 02 Dec '16

02 Dec '16

https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Sandbox/Linux > How do I make this use a system tor instance? > Using sandboxed-tor-browser in this way is not recommended. Why not? Cheers, Patrick

1 0

(FWD) Re: [tor-talk] Javascript exploit
by Roger Dingledine 29 Nov '16

29 Nov '16

In case you haven't noticed this through some other channel. --Roger ----- Forwarded message from Roger Dingledine <arma(a)mit.edu> ----- Date: Tue, 29 Nov 2016 17:43:26 -0500 From: Roger Dingledine <arma(a)mit.edu> To: tor-talk(a)lists.torproject.org Subject: Re: [tor-talk] Javascript exploit On Tue, Nov 29, 2016 at 09:55:23PM -0000, firstwatch(a)sigaint.org wrote: > This is an Javascript exploit Thanks. I pointed some folks on irc to this mail, and Daniel Veditz (Mozilla Security Team) said "the Firefox team was sent a copy of that this morning. We've found the bug being used and are working on a patch." So it sounds like the immediate next step is that Mozilla finishes their patch for it; then the step after that is a quick Tor Browser update. And somewhere in there people will look at the bug and see whether they think it really does apply to Tor Browser. --Roger -- tor-talk mailing list - tor-talk(a)lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message -----

1 0

Top 50 websites (Sign in/out) - Invitation to edit
by Ethan Tseng (via Google Sheets) 25 Nov '16

25 Nov '16

I've shared an item with you: Top 50 websites (Sign in/out) https://docs.google.com/spreadsheets/d/1Q4W9tFePKdLv6_fubn65ygOfGxtLBxP1jjC… It's not an attachment -- it's stored online. To open this item, just click the link above.

3 2

Tor Browser and Targeted RAM Bit-Flips
by teor 18 Nov '16

18 Nov '16

Hi Mike (and other Tor Browser devs), Thought you might be interested in this tor-dev thread about securing Tor and Tor Browser against targeted RAM bit-flip attacks: https://lists.torproject.org/pipermail/tor-dev/2016-November/011655.html T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

2 1

New meeting time: 19:00 UTC on Mondays
by Georg Koppen 03 Nov '16

03 Nov '16

Hi all, we are moving out meeting time to 19:00 UTC on Mondays due to the end of DST. The place is still the same: the #tor-dev IRC channel on irc.oftc.net. Thus, the next meeting will be on Monday 7, 19:00 UTC. See you there, Georg

1 0

Fwd: [desktop][mobile] Schedule Update for 50, ESR45.5 release and Merge day
by Nicolas Vigier 31 Oct '16

31 Oct '16

The next Firefox release is delayed by one week. ----- Forwarded message from Ritu Kothari <rkothari(a)mozilla.com> ----- Date: Fri, 28 Oct 2016 17:34:04 -0700 From: Ritu Kothari <rkothari(a)mozilla.com> To: dev-platform(a)lists.mozilla.org, Firefox Dev <firefox-dev(a)mozilla.org> Subject: [desktop][mobile] Schedule Update for 50, ESR45.5 release and Merge day Schedule change: - 50 go-live date is Nov 15th (was Nov 8th). - ESR 45.5 go-live date is Nov 15th (was Nov 8th). - Merge day is Nov 14th (was Nov 7th). - Beta 51 cycle starts ~Nov 16th - Aurora 52 cycle starts ~Nov 18th. - Beta -> Release migration is Oct 31st (remains unchanged). - 50.1.0 (planned dot release) go-live date of Dec 13th remains unchanged. - 51 go-live date of Jan 24th remains unchanged. *Why the change in schedule?* - We decided to take two late uplifts (in m-b yesterday) re:add-on SDK (bugs 1309351 and 1309350) - These two changes need more bake time on Beta channel. - RC mode for Fx50 starts on Oct 31st & we remain in code freeze mode for two weeks. - RC builds will be pushed out on an as-needed basis. Please let me now if you have any questions or concerns. Thanks, Ritu _______________________________________________ dev-platform mailing list dev-platform(a)lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform ----- End forwarded message -----

1 0

Next meeting: Tuesday Nov 1 18:00 UTC
by Georg Koppen 25 Oct '16

25 Oct '16

Hi all, we need to move the next meeting by one day. It will be in #tor-dev on Nov 1, 18:00 UTC. (yes, even if in some parts of the world daylight saving time will already end this weekend) Georg

1 0

security slider text for tor browser mobile
by Linda Naeun Lee 13 Oct '16

13 Oct '16

Tbb-devs: The UX team have been rewording the interface text that accompanies the security slider (onion button > privacy and security settings) for tor browser mobile. Our goal was to refactor the text so that we accurately communicate the changes in browser functionality and security benefits to the user. We want to finalize the text by the end of this week. Let us know what you think of the changes, correct anything you see wrong, and tell us if we are missing anything. Here is a link to a google doc that has the text: https://docs.google.com/document/d/1U_tbrC1lpuKHZg_QKD_TUVd6ImjTJ3jWZkSxjXg… Anyone with the link can comment on the document, so feel free to share the link around to anyone you think that can help! Please focus your comments on editing the text, rather than giving us feedback on how the interface should be (we plan to prototype the interface later, but it will unexcitingly be as similar to the desktop version as possible). It would be nice to have the same security settings and text in the desktop and mobile browsers! Isa has informally talked to some of you, and there seems to be enthusiasm about this. Let us you would be willing to incorporate these changes into the desktop version as well. Cheers, Linda -- Current Key: https://pgp.mit.edu/pks/lookup?search=lindanaeunlee GPG Fingerprint: FA0A C9BE 2881 B347 9F4F C0D7 BE70 F826 5ED2 8FA2

1 0

OneCRL
by Tom Ritter 06 Oct '16

06 Oct '16

Would anyone be so kind to fill me in on how TB uses OneCRL, if at all? OneCRL being the revocation method of FF that allows high risk certs to be revoked without a browser update. Does TB disable it? Check it? (And if so, is it persisted to disk, which would leak approximate last runtime?) I ask because a similar thing might be the way to go for proposal 273 and want to understand precedent/how this was considered in the past... -tom

2 1

Roadmap from Tor Meeting in Seattle
by isabela＠riseup.net 04 Oct '16

04 Oct '16

Hello there, I updated the wiki with the suggested roadmap that came up from our discussion in Seattle. You can find it here: https://trac.torproject.org/projects/tor/wiki/org/roadmaps/TorBrowser#Roadm… 1. I removed the deliverables we choose to cut from the proposal 2. I might have got wrong the 'who' and 'estimation' for some of the tasks, please review 3. A lot of work has to be done from Dec to March I tried to distribute it but please review and update as you think is best Thanks! Isabela ps: I will add notes about the discussion on reviving the Applications team meetings -- when I do it I will ping you about it :)

3 2

← Newer
1
...
26
27
28
29
30
31
32
...
45
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

tbb-dev