Re: [tor-talk] Another issue "never remember history" at Tor browser setting didn't last for actualisation

2016-11-29 Thread Joe Btfsplk
On 11/29/2016 1:00 PM, tort...@arcor.de wrote: It doesn't show "Clear history when TBB closes," because there is no history saved after a session in private browsing. Yes, but sometimes you want to clear the cache and cookies during a session without closing the Tor Browser. Just as if you

Re: [tor-talk] Javascript exploit

2016-11-29 Thread Roger Dingledine
On Tue, Nov 29, 2016 at 09:55:23PM -, firstwa...@sigaint.org wrote: > This is an Javascript exploit Thanks. I pointed some folks on irc to this mail, and Daniel Veditz (Mozilla Security Team) said "the Firefox team was sent a copy of that this morning. We've found the bug being used and are

Re: [tor-talk] Javascript exploit

2016-11-29 Thread Kevin
The first var looks like an encryption key. Just my humble observation and food for thought. On 11/29/2016 4:55 PM, firstwa...@sigaint.org wrote: This is an Javascript exploit actively used against TorBrowser NOW. It consists of one HTML and one CSS file, both pasted below and also

Re: [tor-talk] Hacker and Tor.

2016-11-29 Thread Flipchan
May i remind You that this is Tor talk mailing list, Tor is made to protect the privacy of people globaly and missuseing Tor is not helping make the Internet safer. Might i suggest that You hack on some vm's instead? Try vulnhub.com Jason Long skrev: (29 november 2016

[tor-talk] Javascript exploit

2016-11-29 Thread firstwatch
This is an Javascript exploit actively used against TorBrowser NOW. It consists of one HTML and one CSS file, both pasted below and also de-obscured. The exact functionality is unknown but it's getting access to "VirtualAlloc" in "kernel32.dll" and goes from there. Please fix ASAP. I had to break

Re: [tor-talk] Another issue "never remember history" at Tor browser setting didn't last for actualisation

2016-11-29 Thread tortalk
Hello Torusers, thanks for your kind response Joe Btfsplk. Privat Browing Joe Btfsplk wrote: >> You can check that from default "Use custom settings for history" to "Never >> remember history". But it is not saved. > Probably because when you switch to Never remember history, that's the >

Re: [tor-talk] Javascript exploit

2016-11-29 Thread Kristov Atlas
For anyone looking into it, I tried to clean up cssbanner.js a little more. https://gist.github.com/kristovatlas/e03be5f10e48801aec88b0e23f00a3d7 I didn't actually compare execution before and after my changes, so caveat emptor. On Tue, Nov 29, 2016 at 6:31 PM, Kevin

Re: [tor-talk] Will Quantum computing be the end of Tor and all Privacy?

2016-11-29 Thread LluĂ­s
Hello everyone: Kevin: > The Tor project will evolve if we put our heads together. This is not > as bad as you think. > > > > On 11/27/2016 12:54 PM, hi...@safe-mail.net wrote: >> Will Quantum computing be the end of Tor and all Privacy? >> >> It's just a matter of time before quantum

Re: [tor-talk] Hacker and Tor.

2016-11-29 Thread Jason Long
Any idea? On Sun, 11/27/16, Jason Long wrote: Subject: Hacker and Tor. To: "tor-talk@lists.torproject.org" Date: Sunday, November 27, 2016, 12:56 AM Hello. If you browse a Cpanel via Tor for