posted by
takyon
on Tuesday August 01 2017, @08:52AM
from the click-our-summary's-specially-crafted-URLs dept.
from the click-our-summary's-specially-crafted-URLs dept.
"This release features an important security update to Tor Browser for Linux users. On Linux systems with GVfs/GIO support Firefox allows to bypass proxy settings as it ships a whitelist of supported protocols. Once an affected user navigates to a specially crafted URL the operating system may directly connect to the remote host, bypassing Tor Browser. Tails and Whonix users, and users of our sandboxed Tor Browser are unaffected, though."
This discussion has been archived.
No new comments can be posted.
Tor Browser 7.0.3 is Released (Major Security Bugfix Release for Linux Users Only)
|
Log In/Create an Account
| Top
| 20 comments
| Search Discussion
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1)
(1)
(Score: -1, Flamebait) by Anonymous Coward on Tuesday August 01 2017, @08:59AM (1 child)
Tor is for child-molesting fags.
(Score: -1, Troll) by Anonymous Coward on Tuesday August 01 2017, @10:28AM
It's all true!
(Score: 0) by Anonymous Coward on Tuesday August 01 2017, @09:29AM (3 children)
- source [torproject.org]
(Score: 2) by kaszz on Tuesday August 01 2017, @11:37AM
That might explain some busts in the last years.
(Score: 2) by frojack on Tuesday August 01 2017, @08:18PM (1 child)
Are we sure it has anything to do with firefox, and not the linux TCP stack?
I saw a longish discussion on the the opensuse list about this very issue not long ago.
The application does not have total control of the routing. Any leakage of ultimate destination IP back to the client TCP stack will often trigger route metrics ("cost") to kick in if there are ANY other routes defined and enabled with lower metric.
No, you are mistaken. I've always had this sig.
(Score: 2) by FatPhil on Wednesday August 02 2017, @08:25AM
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
(Score: 2) by kaszz on Tuesday August 01 2017, @11:31AM (3 children)
If security really matters, then sandboxing is at least a minimum measure to take.
And the sandbox should not even be aware of what the real local network it is operating in.
(Score: 1, Insightful) by Anonymous Coward on Tuesday August 01 2017, @12:30PM (2 children)
You need to have the system running TBB on an isolated network with a firewalled proxy that in turn only allows Tor connections out. If you did this, as I have, then this direct connect exploit doesn't affect you.
A VM might be a less secure alternative, but physical system isolation is still the best bet, especially with dumb non-embedded ethernet devices just in case any of management engine systems in use actually CAN be triggered with coded ethernet/IP messages.
(Score: 0) by Anonymous Coward on Wednesday August 02 2017, @08:57PM (1 child)
(Score: 0) by Anonymous Coward on Wednesday August 02 2017, @09:00PM
Analogy: http://media.paperblog.fr/i/274/2743468/fashion-faux-pas-jour-dark-vador-est-fan-dhel-L-1.jpeg [paperblog.fr]
(Score: 5, Informative) by Arik on Tuesday August 01 2017, @11:43AM (6 children)
If laughter is the best medicine, who are the best doctors?
(Score: 3, Informative) by kaszz on Tuesday August 01 2017, @12:41PM (3 children)
GNOME needs systemd which is a product of RedHat. Which is controlled by its chairman Shelton. That is a career military officer.
Anyone got the message? ;-)
(Score: 0) by Anonymous Coward on Tuesday August 01 2017, @05:19PM (2 children)
> GNOME needs systemd [...]
Not exactly. [freebsd.org]
> Which is controlled by its chairman Shelton. That is a career military officer.
(Score: 3, Insightful) by Arik on Tuesday August 01 2017, @07:07PM
2.) I can generalize that quite a bit. When systemd has a readily apparent benefit, however minor, and the potential negative effects seem abstract and tenuous by comparison, no matter how catastrophic the potential effect, it will be written off and ignored by most humans. As a species, we're just that short-sighted.
If laughter is the best medicine, who are the best doctors?
(Score: 0) by Anonymous Coward on Tuesday August 01 2017, @07:07PM
Hah! He says systemd just works, if you say it doesn't work for you you have no credibility. Fuck that guy
(Score: 2) by FatPhil on Wednesday August 02 2017, @08:29AM (1 child)
So, who should we blame for this - RedHat (current majority contributor to Gnome), well known for things such as systemd, or Miguel de Icaza (originator of Gnome), well known for trying to push .NET into Linux?
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
(Score: 0) by Anonymous Coward on Wednesday August 02 2017, @06:48PM
(Score: 0) by Anonymous Coward on Tuesday August 01 2017, @06:53PM (2 children)
hmmm .. affected here.
so where and how does one edit this "whitelist" in firefox?
I am pretty sure it can be used for other nefarious tasks that don't involve tor ... *humph*
(Score: 0) by Anonymous Coward on Wednesday August 02 2017, @06:28AM (1 child)
https://gitweb.torproject.org/tor-browser.git/commit/?id=a96f898e0da42de751a5e1367a9899cc96fadb1f [torproject.org]
(Score: 0) by Anonymous Coward on Wednesday August 02 2017, @07:33PM
thanks a mega bunch! : )