{"id":1239,"date":"2017-11-05T07:36:10","date_gmt":"2017-11-05T05:36:10","guid":{"rendered":"https:\/\/community.virtono.com\/?p=1239"},"modified":"2017-11-05T07:36:10","modified_gmt":"2017-11-05T05:36:10","slug":"tor-browser-exploit-reveals-ip-address-of-some-users","status":"publish","type":"post","link":"https:\/\/www.virtono.com\/community\/internet-and-technology-news\/tor-browser-exploit-reveals-ip-address-of-some-users\/","title":{"rendered":"Tor browser exploit reveals IP address of some users"},"content":{"rendered":"
Under certain conditions, the Tor Browser reveals the unveiled IP address of the users.\u00a0Affected are only\u00a0Mac\u00a0and\u00a0Linux\u00a0versions of the Firefox bundle, in daily use, the error should affect only a few people.<\/p>\n<\/header>\n
\n

The Tor project has released an\u00a0emergency update<\/a>\u00a0for the Linux and Mac versions of the Tor Browser Bundle.\u00a0Under certain circumstances, the two affected versions betray the real IP address of the users and thus ruin the intended anonymity.\u00a0The Windows version of the Tor browser, the Tails distribution and the alpha-tested Tor browser with sandboxing should not be affected.<\/p>\n

The error occurs when users invoke an address prefixed with file: \/\/ instead of using http: \/\/ or https: \/\/ as usual.\u00a0If users call up such an address, a direct interaction between the operating system and the web server is triggered and the IP address is no longer anonymized.\u00a0Whether the website needs to meet additional requirements for a successful attack is\u00a0not clear\u00a0from the blog post of the finder of the vulnerability<\/a>\u00a0, Filippo Cavallarin, the CEO of the company Segment.\u00a0Normal browsing in the Tor Browser is not affected by the error.<\/p>\n

javascript: void (0) Workaround can still cause problems<\/b><\/p>\n

The Tor project has released a preliminary fix, which, however, can cause problems with file: \/\/ resources.\u00a0For most users, however, this should be to get over.\u00a0The current version for Mac and Linux is 7.0.9.\u00a0Windows users can stay on version 7.0.8.\u00a0There is currently no evidence of active exploit attacks.<\/p>\n

On Monday, the 6th of November, a new version will appear in the Alpha-Channel, in order to patch the vulnerability in these versions as well.\u00a0These versions are not intended for productive use anyway.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Under certain conditions, the Tor Browser reveals the unveiled IP address of the users.\u00a0Affected are only\u00a0Mac\u00a0and\u00a0Linux\u00a0versions of the Firefox bundle, in daily use, the error should affect only a few people. The Tor project has released an\u00a0emergency update\u00a0for the Linux and Mac versions of the Tor Browser Bundle.\u00a0Under certain circumstances,<\/p>\n","protected":false},"author":3,"featured_media":1240,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[25],"tags":[],"class_list":["post-1239","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet-and-technology-news"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2017\/11\/Tor.jpg?fit=1494%2C1014&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7ISfL-jZ","jetpack_likes_enabled":true,"jetpack-related-posts":[{"id":147,"url":"https:\/\/www.virtono.com\/community\/tutorial-how-to\/how-to-install-and-run-apache-web-server-on-ubuntu-linux-os\/","url_meta":{"origin":1239,"position":0},"title":"How to Install and Run Apache Web Server on Linux OS","author":"Daniel Draga","date":"July 23, 2016","format":false,"excerpt":"This article is part of series of articles on Apache. Here is the list: Introduction to Apache Web Server. Difference between Apache http and Apache Tomcat. How to Install and Run Apache Web Server on Ubuntu Linux.(this one) How to Install and Run Apache Web Server on Windows 10. Original\u2026","rel":"","context":"In "Tutorials"","block_context":{"text":"Tutorials","link":"https:\/\/www.virtono.com\/community\/category\/tutorial-how-to\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2016\/07\/CfXJWnZUsAACtrg2.png?fit=470%2C245&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":942,"url":"https:\/\/www.virtono.com\/community\/news-announcements\/web-pages-not-served-via-https-will-be-marked-not-secure-in-google-chrome-and-mozilla-firefox-are-you-prepared\/","url_meta":{"origin":1239,"position":1},"title":"Web pages not served via HTTPS will be marked \u2018not secure\u2019 in Google Chrome and Mozilla Firefox. Are you prepared?","author":"Virtono","date":"May 18, 2017","format":false,"excerpt":"Browsers are changing, are you prepared? Web pages not served via HTTPS will be marked \u2018not secure\u2019 in Google Chrome and Mozilla Firefox. Could your website be one of them? As the world's most popular browsers, this will affect nearly 70% of global internet traffic and other browser companies will\u2026","rel":"","context":"In "Announcements"","block_context":{"text":"Announcements","link":"https:\/\/www.virtono.com\/community\/category\/news-announcements\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2017\/05\/https.png?fit=1197%2C854&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2017\/05\/https.png?fit=1197%2C854&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2017\/05\/https.png?fit=1197%2C854&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2017\/05\/https.png?fit=1197%2C854&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2017\/05\/https.png?fit=1197%2C854&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":527,"url":"https:\/\/www.virtono.com\/community\/tutorial-how-to\/host-your-own-speedtest-server-on-centos-7-vps\/","url_meta":{"origin":1239,"position":2},"title":"HOST YOUR OWN SPEEDTEST SERVER ON CENTOS 7 VPS","author":"Daniel Draga","date":"August 25, 2016","format":false,"excerpt":"\u00a0 SpeedTest.net has been recently being a global standard for broadband speed test. Many users use their service to test how fast their internet connection is. You know that you can even host your own Speedtest webapp using its Mini version? Well, you can! Simply follow very easy steps below:\u2026","rel":"","context":"In "Tutorials"","block_context":{"text":"Tutorials","link":"https:\/\/www.virtono.com\/community\/category\/tutorial-how-to\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2016\/08\/maxresdefault.jpg?fit=1200%2C675&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2016\/08\/maxresdefault.jpg?fit=1200%2C675&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2016\/08\/maxresdefault.jpg?fit=1200%2C675&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2016\/08\/maxresdefault.jpg?fit=1200%2C675&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2016\/08\/maxresdefault.jpg?fit=1200%2C675&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3468,"url":"https:\/\/www.virtono.com\/community\/tutorial-how-to\/how-to-install-haproxy-on-linux\/","url_meta":{"origin":1239,"position":3},"title":"How to install HAProxy on Linux","author":"George B.","date":"June 7, 2023","format":false,"excerpt":"This article will provide a comprehensive, step-by-step guide on how to install HAProxy on Linux, specifically Ubuntu and CentOS distributions. So, let's dive in and explore the installation process. In today's technology-driven world, ensuring high availability and efficient load balancing of web applications is crucial. HAProxy, a powerful and open-source\u2026","rel":"","context":"In "Tutorials"","block_context":{"text":"Tutorials","link":"https:\/\/www.virtono.com\/community\/category\/tutorial-how-to\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2023\/06\/How-to-install-HAProxy-on-Linux.png?fit=600%2C330&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2023\/06\/How-to-install-HAProxy-on-Linux.png?fit=600%2C330&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2023\/06\/How-to-install-HAProxy-on-Linux.png?fit=600%2C330&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":2144,"url":"https:\/\/www.virtono.com\/community\/knowledgebase\/the-best-linux-distributions-for-old-hardware\/","url_meta":{"origin":1239,"position":4},"title":"The best Linux distributions for old hardware","author":"Shreyash Sharma","date":"December 15, 2020","format":false,"excerpt":"There is no hardware for which a working Linux is not available.\u00a0Finding the right role for old hardware and the right board and system for a planned role is still complicated. For a practical presentation, almost each of the following aspects would have deserved its own workshop.\u00a0This entry-level contribution to\u2026","rel":"","context":"In "Knowledgebase"","block_context":{"text":"Knowledgebase","link":"https:\/\/www.virtono.com\/community\/category\/knowledgebase\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2020\/12\/Which-Distro1.png?fit=705%2C273&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2020\/12\/Which-Distro1.png?fit=705%2C273&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2020\/12\/Which-Distro1.png?fit=705%2C273&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2020\/12\/Which-Distro1.png?fit=705%2C273&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":3459,"url":"https:\/\/www.virtono.com\/community\/tutorial-how-to\/how-to-install-prometheus-and-grafana-on-ubuntu\/","url_meta":{"origin":1239,"position":5},"title":"How to install Prometheus and Grafana on Ubuntu","author":"George B.","date":"June 6, 2023","format":false,"excerpt":"Prometheus and Grafana are powerful open-source tools used for monitoring and visualizing system metrics, making them essential components of any modern infrastructure. In this comprehensive guide, we will walk you through the step-by-step process of installing Prometheus and Grafana on an Ubuntu system. By the end of this tutorial, you'll\u2026","rel":"","context":"In "Tutorials"","block_context":{"text":"Tutorials","link":"https:\/\/www.virtono.com\/community\/category\/tutorial-how-to\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2023\/06\/How-to-install-Prometheus-and-Grafana-on-Ubuntu.png?fit=600%2C330&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2023\/06\/How-to-install-Prometheus-and-Grafana-on-Ubuntu.png?fit=600%2C330&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.virtono.com\/community\/wp-content\/uploads\/2023\/06\/How-to-install-Prometheus-and-Grafana-on-Ubuntu.png?fit=600%2C330&ssl=1&resize=525%2C300 1.5x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/posts\/1239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/comments?post=1239"}],"version-history":[{"count":1,"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/posts\/1239\/revisions"}],"predecessor-version":[{"id":1241,"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/posts\/1239\/revisions\/1241"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/media\/1240"}],"wp:attachment":[{"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/media?parent=1239"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/categories?post=1239"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.virtono.com\/community\/wp-json\/wp\/v2\/tags?post=1239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}