[tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default

[Georg Koppen]

Olivier Cornu:
> So, TBB's supposed bug becomes: TBB is leaking non-Tor traffic to 127.0.0.1.

There is already a ticket:

https://trac.torproject.org/projects/tor/ticket/10419

You might want to add comments there if there are indeed ways to
fingerprint the TorBrowser via requests to 127.0.0.1.

Georg


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 862 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20140121/0af7b40e/attachment.sig>