[tor-talk] Thunderbird leak

[Robert Heller]

At Sun, 26 Jan 2014 17:33:19 +0000 tor-talk at lists.torproject.org wrote:

> 
> YIKES... Are you sure, how did this slip by?
> 
> 
> 
> On Sun, Jan 26, 2014 at 3:06 PM, Mike Cardwell <tor at lists.grepular.com>wrote:
> 
> > I just blogged about a general security issue in Thunderbird which may
> > also affect people who are using Tor:
> >
> > https://grepular.com/Security_Bug_Thunderbird_Websites_Tabs
> >
> > Basically, an email can be crafted such that when you click a link in
> > that email it is opened within a Thunderbird tab instead of in your
> > usual (potentially torified) web browser. Bypassing any other defenses
> > you might also have, including NoScript etc.

The woes of HTML E-Mail...

> >
> > --
> > Mike Cardwell  https://grepular.com/     http://cardwellit.com/
> > OpenPGP Key    35BC AF1D 3AA2 1F84 3DC3  B0CF 70A5 F512 0018 461F
> > XMPP OTR Key   8924 B06A 7917 AAF3 DBB1  BF1B 295C 3C78 3EF1 46B4
> >
> > --
> > tor-talk mailing list - tor-talk at lists.torproject.org
> > To unsubscribe or change other settings go to
> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
> >
> >

-- 
Robert Heller             -- 978-544-6933 / heller at deepsoft.com
Deepwoods Software        -- http://www.deepsoft.com/
()  ascii ribbon campaign -- against html e-mail
/\  www.asciiribbon.org   -- against proprietary attachments