Page MenuHomePhabricator

Fingerprinting: push tor 0.3.2.9 to stable repo at time of TB 7.5 release
Closed, ResolvedPublic

Description

This may be on your radar already, I'm just leaving it here to be safe:

Tor Browser 7.5, due for release on 2018-01-23, will include tor 0.3.2.9, and IMO it is important to ship this tor version (in the Whonix Gateway stable Debian repository) as close to the actual TB release as possible. Otherwise, it will be trivial to fingerprint Whonix users, because tor 0.3.1.x does not support v3 onions, but 0.3.2.x does.

Details

Impact
High

Event Timeline

Uploaded tor_0.3.2.9-1~d80.jessie+1_amd64.deb to Whonix jessie-proposed-updates and testers repository.

Patrick changed Impact from Needs Triage to High.
Patrick added a subscriber: HulaHoop.

(Adjusting tags as reminder.)

TB 7.5 was released today, so you may want to transition this to the stable repository.

Patrick closed this task as Resolved.Jan 31 2018, 7:47 PM
Patrick claimed this task.