[tor-talk] Torbutton-birdy version 0.0.2

[Mike Perry]

Thus spake Jacob Appelbaum (jacob at appelbaum.net):

> I'm pleased to say that Sukhbir, tanaq, and I are making progress on
> Torbutton-birdy, the Torbutton like plugin for Thunderbird. Today marks
> the second release with two important fixes:

I say we just call it TorBirdy. Easier to type, and has a better ring to it
I think.

Hopefully, Torbutton will soon be entirely forgotten in favor of Tor
Browser, anyways :).

>   the auto-configuration wizard leaks, so we disabled it
>   the timezone is now UTC and does not leak your actual timezone
> 
> You may download the xpi here:
> https://github.com/downloads/ioerror/torbutton-birdy/torbutton-birdy.xpi
> 
> We had around 57 downloads for our first release, we'd love to see that
> many users upgrade and send us feedback. We're really looking for
> informational leaks but the most important kinds of leaks are proxy
> bypass or other kinds of seriously harmful bugs.
>
> Here is our long running open bug about reviewing torbutton-birdy:
> https://trac.torproject.org/projects/tor/ticket/5797

I already mentioned this in the ticket, but might as well say it here
too, in case people don't bother to click the link: Attachments can also
cause proxy bypass when external apps are launched to open them, esp for
doc and pdf attachments.

It would be great if someone could test trying to open those
attachments, especially after setting the prefs I mention in:
https://trac.torproject.org/projects/tor/ticket/5797#comment:12.

If the prefs don't cause a warning of some kind first, you might need to
adapt that component I linked to in comment 11...


-- 
Mike Perry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120525/d8147d6c/attachment-0001.pgp>