On 8/6/13 6:41 AM, Jacob Appelbaum wrote: >> (2) Even have an RSS feed of them available through the TBB, as well as RSS >> of TBB releases, and what security issues are covred including one advised >> by Firefox. This could notify of stable, alpha and beta releases, so >> everyone knows when security updates are available, possibly at the cost of >> stability. > > I like this idea - though I wonder how users would feel about it? Will > they read it? Should it be our own RSS feed or an RSS feed of Mozilla's > data?
Not sure if this is practical but the TBB splash screen could give some notion of the implications of using an old specific TBB... e.g., with the version check return one or more critical vulns that have been patched, to warn the user and encourage immediate update? Frankly, I'm not sure this is solving a problem Tor/TBB has, but it strikes me that a warning along the lines of the following for old TBB would not be bad: "Holy shit, this TBB is from 12 months ago! You're crazy to use such an outdated version. Please update!" -- Joseph Lorenzo Hall Senior Staff Technologist Center for Democracy & Technology 1634 I ST NW STE 1100 Washington DC 20006-4011 (p) 202-407-8825 (f) 202-637-0968 j...@cdt.org PGP: https://josephhall.org/gpg-key fingerprint: BE7E A889 7742 8773 301B 4FA1 C0E2 6D90 F257 77F8 -- Liberationtech list is public and archives are searchable on Google. Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at compa...@stanford.edu or changing your settings at https://mailman.stanford.edu/mailman/listinfo/liberationtech