[tor-talk] Torbutton-birdy version 0.0.2

[Jacob Appelbaum]

On 05/25/2012 07:17 PM, Mike Perry wrote:
> Thus spake Jacob Appelbaum (jacob at appelbaum.net):
> 
>> I'm pleased to say that Sukhbir, tanaq, and I are making progress on
>> Torbutton-birdy, the Torbutton like plugin for Thunderbird. Today marks
>> the second release with two important fixes:
> 
> I say we just call it TorBirdy. Easier to type, and has a better ring to it
> I think.
> 
> Hopefully, Torbutton will soon be entirely forgotten in favor of Tor
> Browser, anyways :).

I've renamed it:
https://github.com/ioerror/torbirdy


> 
>>   the auto-configuration wizard leaks, so we disabled it
>>   the timezone is now UTC and does not leak your actual timezone
>>
>> You may download the xpi here:
>> https://github.com/downloads/ioerror/torbutton-birdy/torbutton-birdy.xpi
>>
>> We had around 57 downloads for our first release, we'd love to see that
>> many users upgrade and send us feedback. We're really looking for
>> informational leaks but the most important kinds of leaks are proxy
>> bypass or other kinds of seriously harmful bugs.
>>
>> Here is our long running open bug about reviewing torbutton-birdy:
>> https://trac.torproject.org/projects/tor/ticket/5797
> 
> I already mentioned this in the ticket, but might as well say it here
> too, in case people don't bother to click the link: Attachments can also
> cause proxy bypass when external apps are launched to open them, esp for
> doc and pdf attachments.
> 

Good catch.

> It would be great if someone could test trying to open those
> attachments, especially after setting the prefs I mention in:
> https://trac.torproject.org/projects/tor/ticket/5797#comment:12.
> 
> If the prefs don't cause a warning of some kind first, you might need to
> adapt that component I linked to in comment 11...
> 

I'll take a look - thanks!

All the best,
Jacob