[tor-bugs] #9387 [Tor Launcher]: Tor Launcher/Torbutton should provide a "Security Slider"

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Mar 24 21:25:59 UTC 2015


#9387: Tor Launcher/Torbutton should provide a "Security Slider"
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  gk
  mikeperry              |     Status:  closed
         Type:           |  Milestone:
  enhancement            |    Version:
     Priority:  major    |   Keywords:  tbb-security, tbb-usability, tbb-
    Component:  Tor      |  linkability, tbb-3.0, extdev-interview, tbb-
  Launcher               |  isec-report, tbb-4.5-alpha,
   Resolution:  fixed    |  TorBrowserTeam201503
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------
Changes (by mikeperry):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Ok, this is pushed! Everything should be good to go for TBB 4.5a5 here.

 Also, as far as I can tell, the "Medium Low" position of the security
 slider would have prevented one pwn2own bug (https://www.mozilla.org/en-
 US/security/advisories/mfsa2015-29/), and "Medium High" would have
 prevented non-https pages from exploiting the second
 (https://www.mozilla.org/en-US/security/advisories/mfsa2015-28/). The
 "High" position would have prevented https://www.mozilla.org/en-
 US/security/advisories/mfsa2015-28/ entirely (both by disabling JS, and by
 disabling SVG).

 So good work, everybody!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9387#comment:103>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list