3 ms·
Anyone know someone at the Tor Project? Based on a breakdown I read, it downloads the Tor client from https://dist.torproject.org/torbrowser/6.5.1/tor-win32-0.
by yardstick 9y ago
Anyone know someone at the Tor Project? Based on a breakdown I read, it downloads the Tor client from
https://dist.torproject.org/torbrowser/6.5.1/tor-win32-0.2.9.10.zip https://dist.torproject.org/torbrowser/6.5.1/tor-win32-0.2.9...
It would be simple to rename this link (or perform a referer check or something else to stop automated downloads), at least temporarily.
Yes, the malware authors will release an update with the different URL (or another hosting site entirely, or embedded), but at least it would provide time for vulnerable users to install patches. Especially now that Microsoft has released a patch for XP.
(I'm basing this URL info on the breakdown found at https://www.bleepingcomputer.com/news/security/wannacry-wana-decryptor-wanacrypt0r-technical-nose-dive/ https://www.bleepingcomputer.com/news/security/wannacry-wana...)
- wcfields 9y agoI wondered that exact same thing on Friday; thanks for pointing it out.