Patrick Zanon: > Package: xul-ext-torbutton > Version: 1.2.5-3 > Severity: grave > Justification: renders package unusable > > > As described in the object torbutton sets in iceweasel configuration of the > proxy the wrong port number (8118) rather than the correct polipo port > (8123), > thus iceweasel says that the proxy does not answer to connection requests.
Please, please do not use xul-ext-torbutton anymore. Quoting the NEWS
file for unstable:
torbutton (1.4.6.3-1) unstable; urgency=high
Security fixes introduced in Iceweasel 10.0.8esr prevents Torbutton
from hooking window properties. This means that using this package
is no longer substantially different from disabling websockets,
disabling plugins, and using Private Browsing Mode to prevent disk
leaks.
Due to the very strong risk of fingerprinting and the resulting
reduction of the anonymity set, it is more than strongly advised to
uninstall this package and use the TorBrowserBundle instead. The later
can be downloaded at:
https://www.torproject.org/projects/torbrowser.html.en
The TorBrowser also includes several changes in Firefox itself that
address other possible leaks and fingerprinting issues.
-- Jérémy Bobbio <[email protected]> Tue, 16 Oct 2012 20:33:40 +0200
(Note that this package is not in Wheezy for that reason.)
--
Lunar .''`.
[email protected] : :Ⓐ : # apt-get install anarchism
`. `'`
`-
signature.asc
Description: Digital signature
