Page MenuHomePhabricator

Fingerprinting: push tor 0.3.2.9 to stable repo at time of TB 7.5 release
Closed, ResolvedPublic

Description

This may be on your radar already, I'm just leaving it here to be safe:

Tor Browser 7.5, due for release on 2018-01-23, will include tor 0.3.2.9, and IMO it is important to ship this tor version (in the Whonix Gateway stable Debian repository) as close to the actual TB release as possible. Otherwise, it will be trivial to fingerprint Whonix users, because tor 0.3.1.x does not support v3 onions, but 0.3.2.x does.

Details

Impact
High

Event Timeline

Uploaded tor_0.3.2.9-1~d80.jessie+1_amd64.deb to Whonix jessie-proposed-updates and testers repository.

Patrick changed Impact from Needs Triage to High.
Patrick added a subscriber: HulaHoop.

TB 7.5 was released today, so you may want to transition this to the stable repository.

Patrick claimed this task.