Erinn Clark erinn@torproject.org wrote:

For context on the [URGENT], please check out these links: http://googleonlinesecurity.blogspot.com/2013/01/enhancing-digital-certifica... https://blog.mozilla.org/security/2013/01/03/revoking-trust-in-two-turktrust...

Packages: http://people.torproject.org/~erinn/qa/stable/2.3.25-2 http://people.torproject.org/~erinn/qa/alpha/2.4.7-alpha

sha256sums: https://people.torproject.org/~erinn/qa/stable/sha256sums-2.3.25-2.txt.asc https://people.torproject.org/~erinn/qa/alpha/sha256sums-2.4.7-alpha.txt.asc

Turnaround: 24h, or as soon as you can

Special notes: There's also a new libevent in these bundles; please double check the version to make sure it's 2.0.21-stable.

[Notice] Initialized libevent version 2.0.21-stable using method epoll.

Testing: tor-browser-gnu-linux-x86_64-2.3.25-2-dev-en-US.tar.gz Platform: Debian 6.0.6 Processor: Intel(R) Pentium(R) CPU B950 @ 2.10GHz

TBB Launches successfully - OK Connects to the Tor network - OK Browser toolbars and menus work. Tab dragging works - OK

All extensions are present and functional - OK - HTTPS-Everywhere 3.1.2 - NoScript 2.6.4.2 - TorButton 1.4.6.3

WebBrowsing works as expected - HTTP, HTTPS, .onion browsing works - HTML5 videos work (http://videojs.com/) - http://ip-check.info/?lang=en - OK - https://panopticlick.eff.org/ - one in 1,308,207, 20.32 bits of identifying information

Vidalia settings - Use static control/SOCKS port - OK

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Erinn Clark:

For context on the [URGENT], please check out these links: http://googleonlinesecurity.blogspot.com/2013/01/enhancing-digital-certifica...

https://blog.mozilla.org/security/2013/01/03/revoking-trust-in-two-turktrust...

Packages: http://people.torproject.org/~erinn/qa/stable/2.3.25-2 http://people.torproject.org/~erinn/qa/alpha/2.4.7-alpha

sha256sums: https://people.torproject.org/~erinn/qa/stable/sha256sums-2.3.25-2.txt.asc

https://people.torproject.org/~erinn/qa/alpha/sha256sums-2.4.7-alpha.txt.asc

Turnaround: 24h, or as soon as you can

Special notes: There's also a new libevent in these bundles; please double check the version to make sure it's 2.0.21-stable.

I'm writing this email in haste on my way to Stockholm -- I apologize in advance for any dunderheaded mistakes I've made wrt signing, directories, file permissions, or anything. I'll check back in a few hours to fix anything like that.

The Windows alpha/obfsproxy TBBs are missing because they haven't built yet, but I'll put them up ASAP and mail the list again. There will also be some Tor alpha packages (Vidalia bundles) for testing tomorrow, but they are less urgent (in case anyone is wondering where the rest of the 0.2.4.7-alpha packages are).

Thanks, Erinn

_______________________________________________ tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa

Testing: tor-browser-gnu-linux-x86_64-2.4.7-alpha-1-dev-en-US.tar.gz tor-obfsproxy-browser-gnu-linux-x86_64-2.4.7-alpha-1-dev-en-US.tar.gz Platform: Fedora 17 Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz

libevent: 2.0.21-stable

TBB Launches successfully - OK Connects to the Tor network - OK Browser toolbars and menus work. Tab dragging works. - OK DNS - No leaks observed (wireshark)

All extensions are present and functional - OK - HTTPS-Everywhere 4.0development.4 - NoScript 2.6.4.2 - TorButton 1.4.6.3

WebBrowsing works as expected - OK - HTTP, HTTPS, .onion browsing works - HTML5 videos work - ip-check.info - OK - samy.pl/evercookie - OK (new identity clears cookie) - html5demos.com/web-socket - Not Connected / Socket Closed

- -- - -Phoul