[tor-bugs] #10682 [TorBrowserButton]: Disable update pings for Torbutton and Tor Launcher

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Feb 8 22:03:11 UTC 2014


#10682: Disable update pings for Torbutton and Tor Launcher
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mikeperry
  mikeperry              |     Status:  new
         Type:  defect   |  Milestone:
     Priority:           |    Version:
  critical               |   Keywords:  tbb-security, extdev-interview,
    Component:           |  MikePerry201401R
  TorBrowserButton       |  Parent ID:
   Resolution:           |
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by ben):

 While we're at it, I think it's safer to do the same for all extensions
 that are shipped with Tor, including HTTPS Everywhere and noscript. If I'm
 coming out of an tor exit node asking for an update for my noscript,
 that's an easy way to get me. The SSL certs are checked, but I think all
 built-in CAs are accepted by Firefox.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10682#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list