[tor-bugs] #30266 [Webpages/Website]: We offer outdated Windows Tor binaries on our website claiming this is the source code

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Apr 23 10:12:37 UTC 2019


#30266: We offer outdated Windows Tor binaries on our website claiming this is the
source code
----------------------------------+--------------------
     Reporter:  gk                |      Owner:  hiro
         Type:  defect            |     Status:  new
     Priority:  High              |  Milestone:
    Component:  Webpages/Website  |    Version:
     Severity:  Normal            |   Keywords:
Actual Points:                    |  Parent ID:  #29901
       Points:                    |   Reviewer:
      Sponsor:                    |
----------------------------------+--------------------
 We offer the Windows Expert bundle on our website on

 https://www.torproject.org/download/tor/ (after #29991 got fixed).

 However,

 1) The version offered is horribly out-of-date and probably contains
 security vulnerabilities

 2) It's _not_ source code. Those are binaries being meant to run on
 Windows. Thus, this is confusing as the links otherwise point to the
 actual source code (and signatures)

 3) Additionally, I think per-platform source code is confusing. There is
 no source code just for Linux or just for macOS (nor Windows).

 I am not sure if you want different tickets for the issues raised here,
 though. whatever works for you best I guess. 1) is the most pressing
 issue.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30266>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list