3 ms·
This was patched if you were using the latest Tor Browser Bundle at the time this exploit was attempted [1] . Vulnerabilities will always be disclosed, develope
by derrida 13y ago
This was patched if you were using the latest Tor Browser Bundle at the time this exploit was attempted [1] . Vulnerabilities will always be disclosed, developers will always have to patch them. Automatic updating and deterministic builds [2] are the way to go.
[1] The version numbers are here https://blog.torproject.org/blog/new-tor-browser-bundles-and-tor-02414-alpha-packages https://blog.torproject.org/blog/new-tor-browser-bundles-and... Note: these version numbers were not vulnerable to the exploit, patched in June & note the day the exploitation took place (August)
[2] Background on deterministic builds and binary verification http://lwn.net/SubscriberLink/564263/1ab0ab93a900ecea/ http://lwn.net/SubscriberLink/564263/1ab0ab93a900ecea/