TOR exploit threatens anonymity


I was in a thread on /g/ about this yesterday. It only affects Windows NT machines so I doubt many people here would be vulnerable
 
Last edited by a moderator:
Since the attack was designed at Firefox for Windows, which the Tor Browser Bundle is based upon, it seems likely that this is not a random occurance, and that the malware is designed specifically designed to compromise the identities of anonymous internet users.
https://openwatch.net/i/200/

Its just a JS exploit. If you had JS off (why the fuck would you leave it on in the first place) then you're fine
 
Since the attack was designed at Firefox for Windows, which the Tor Browser Bundle is based upon, it seems likely that this is not a random occurance, and that the malware is designed specifically designed to compromise the identities of anonymous internet users.
https://openwatch.net/i/200/


Its just a JS exploit. If you had JS off (why the fuck would you leave it on in the first place) then you're fine
Nothing to do with WIndows NT then ! 
 
OMFG! Ok, let me explain. The exploit was based off three HTML files that were executed through an iFrame. They each activated the others so that even if you prevented one from loading initially, it would simply become loaded by the other files. These HTML files were made with the express purpose of inserting code into the ram through an exploit found ONLY in Windows NT with Firefox 17 (same version as the TOR Browser Bundle as well as Firefox ESR). Windows NT as in Windows versions with the NT Kernal (XP, Vista, 7, and 8) The exploit is patched in Firefox 18, as well as in Firefox 17 on all other OSes (GNU/Linux, Android, Mac OS) so that's why it only affects Windows NT users. Not because the code was in .exe format or something of that nature, but simply because that is the only version that was still called "current" for the TBB that had not received the JS patch.
 
Oh, and the reason this attack is recent is that the latest version (or at least a recent change in the TBB) made it so that JS was enabled by default. So, even though Noscript was installed, JS content would still function normally allowing the FBI to "attack"


It's claimed that this is simply to combat drugs and child pornography, but it's quite clear that this was more of a blanket measure than a direct attack
 
I like how you contradict yourself from one post to another.

Windows NT as in Windows versions with the NT Kernal (XP, Vista, 7, and 8
Your previous post:

It only affects Windows NT machines so I doubt many people here would be vulnerable
Yeah, so like before you said it only affects Windows NT so probably 0.1 % of the market, but then you realized that it actually means Windows NT Kernel which is like 90% of the market. And it's certainly not a small part of the Tor users either, since Tor users may not be using the latest firefox version (the tor firefox package does not have auto-update function). 

so that's why it only affects Windows NT users
I have never seen anybody refering to Windows7 and 8 users as Windows NT users. That's quite some acrobatic achievement there, just to save your previous post inaccuracy. 
 
OMFG!!!!!!!! WOULD YOU FUCKING LISTEN TO ME!!!! Windows NT == versions with the NT Kernal! I wasn't referring to the IT version. It's a term used to describe XP, Vista, 7 and 8.
 
Stop arguing you two!

Yes, EssoAir was wrong to call the affected OS Win NT.  But he did clarify that when he said that, he meant Win NT-based OSes, which is fair enough because it's true - Windows development is currently coming off the NT codeline and using the good old NT kernel.  It's quite a common way to distinguish between the two codelines in certain circles.

And EssoAir, try to stop starting each post with 'OMFG' and god knows how many exclamation marks.  S'not really helping, you know.
 
And EssoAir, try to stop starting each post with 'OMFG' and god knows how many exclamation marks.  S'not really helping, you know.
Yeah, the way you treat a very neutral answer from me with a OMFG is not calling for a very peaceful discussion in the first place. 

EssoAir, Even when I am tired with your answers you will notice I never end up swearing. Stop behaving like a immature teenager. 
 
Ya, Im just tired of feeling the need to prove everything I say.
Yeah, well what do you expect when you have the habit on these boards to throw inaccurate/biased/unsupported comments all the time ? As someone else said in another thread, reputation is something you build over time. 

And I'm not doing any ad hominem here, I'll argue with anyone who makes false claims, no matter how much time they have spent on these boards. So, this is not directed to you only. 
 
Back
Top