[tor-talk] Javascript vs privacy?

[Andreas Krey]

On Wed, 07 Aug 2013 13:38:31 +0000, adrelanos wrote:
> scarp:
> > It is inappropriate for a web browser to not be automatically updated.
> 
> Generally a good idea... Once concern.
> 
> What about the claim, if The Tor Project had an auto updater, they could
> get gag ordered to ship a backdoor (to specific users).

If the update itself goes via tor there is no way to identify
specific users. (For the initial download the situation doesn't
change.)

> Is there any
> legal base for that or is that only speculation?

Probably a secret one, then. Besides the tor project suddenly
losing a lot of employees in a situation like that.

Andreas

-- 
"Totally trivial. Famous last words."
From: Linus Torvalds <torvalds@*.org>
Date: Fri, 22 Jan 2010 07:29:21 -0800