Security Vulnerability in Tor Browser

Post by _rdvw » Thu, May 26, 2022, 9:50 AM UTC

joecool1029 wrote: post #115

Just a heads up for Android users: The Play store version is a few releases out of date, to get current use FDroid and make sure Guardian Project repo is selected (it's not by default). Question for the Mozillans/Googlers: How is it that Firefox Nightly are fast-track released multiple times a day to Play Store but stable Tor Browser updates are stuck for weeks? Is there a 'skip the review' option for nightly release…

Post by 0daystock » Thu, May 26, 2022, 2:46 PM UTC

tptacek wrote: post #2

A reminder that Tor Browser might be one of the least safe browsers you can run: it's a fork of Firefox, meaning that its maintainers have to coordinate and port patches from the mainline project. Firefox is already not one of the most hardened browser engines. Meanwhile, the fork you'll be running is specifically designed to hide sensitive traffic, and collapses all those users into a single version for exploits to…

Post by 0daystock » Thu, May 26, 2022, 3:28 PM UTC

Syonyk wrote: post #94

And this is why Whonix is critical - because even when you pop the browser, you still have another layer of protection - the gateway VM. Tails browser on [almost anything] is one browser exploit away from beaconing out directly from your IP, and has done so rather frequently over the years. Whonix stuffs the whole browser and such into a workstation VM, which is only connected to the gateway VM - which "torifies" eve…

Post by Syonyk » Thu, May 26, 2022, 4:38 PM UTC

vorticalbox wrote: post #142

Syonyk wrote: post #94

And this is why Whonix is critical - because even when you pop the browser, you still have another layer of protection - the gateway VM. Tails browser on [almost anything] is one browser exploit away from beaconing out directly from your IP, and has done so rather frequently over the years. Whonix stuffs the whole browser and such into a workstation VM, which is only connected to the gateway VM - which "torifies" eve…

> Tails browser on [almost anything] is one browser exploit away from beaconing out directly from your IP as far as I am aware Tails use IP tables to force all network connections through tor. You would require an escape from the browser and then a privilege escalation to get around this.

Post by dveditz_ » Thu, May 26, 2022, 5:29 PM UTC

dveditz_ wrote: post #87

mmastrac wrote: post #77

Earlier quoted context omitted.

Perhaps they moved fast: "Mozilla is aware of websites exploiting this vulnerability already."

We are not aware of any such thing. As rebelwebmaster noted, when we know that we put it in our advisory. Clearly the vulnerabilities are exploitable as demonstrated by Manfred Paul's winning Pwn2Own entry. The details were disclosed only to Zero Day Initiative staff (the contest organizers) and Mozilla. They have not been discovered on any website in the wild.