Changes between Version 1 and Version 2 of Ticket #20100, comment 8


Ignore:
Timestamp:
Nov 22, 2016, 9:58:58 PM (4 years ago)
Author:
ronvandaal_
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #20100, comment 8

    v1 v2  
    55Please know the problem existed in tor-browser-linux64-6.0.4_en-US.tar.xz and earlier ones as described in FIPO. It affects Iceweasel's core lib and the only way to get info, I believe, is to implement a hash checker before runtime and exit when a compromised lib is detected. This way you'd get more feedback from users that have similar issues.
    66
    7 I don't know why it always comes back with new setups and builds and the latest 1-byte change (same filesize!) appears to me quite as odd... 1 byte is too little to investigate. If it's a remote sploit (i.e. in HTTP stream) it could be targeting a certain platform on which Iceweasel runs. But this is speculation.
     7I don't know why it always comes back with new setups and builds and the latest 1-byte change (same filesize!) appears to me quite as odd... 1 byte is too little to investigate.