Re: [Tails-dev] Consider adding -D_FORTIFY_SOURCE=3 to some applications (e.g., web browser)?

2022-09-19 Thread intrigeri
Hi,

jvoisin (2022-09-19):
> Do you have a link to the bug you opened intrigeri?

https://bugs.debian.org/1020275

Cheers!
___
Tails-dev mailing list
Tails-dev@boum.org
https://www.autistici.org/mailman/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.


Re: [Tails-dev] Consider adding -D_FORTIFY_SOURCE=3 to some applications (e.g., web browser)?

2022-09-19 Thread jvoisin via Tails-dev
>> Has anyone looked into adding -D_FORTIFY_SOURCE=3 to some
>> It's unclear how much the performance impact is; probably the only way to 
>> know is to try it.

I'd argue that it's also unclear what security benefits it would bring
to a web-browser :P

But having it enabled in Debian by default would indeed by sweet. Do you
have a link to the bug you opened intrigeri?

o/
___
Tails-dev mailing list
Tails-dev@boum.org
https://www.autistici.org/mailman/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.


Re: [Tails-dev] Javascript question

2022-09-19 Thread boyska

Ahmed Chakik via Tails-dev:
Hi, if I connect to VPN first then start Tor browser with javascript 
enabled to visit a clearnet website, can javascript see my true IP 
address? Thanks


VPNs are not supported in Tails. See:
https://tails.boum.org/support/faq/#vpn

--
boyska
___
Tails-dev mailing list
Tails-dev@boum.org
https://www.autistici.org/mailman/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.


Re: [Tails-dev] Consider adding -D_FORTIFY_SOURCE=3 to some applications (e.g., web browser)?

2022-09-19 Thread intrigeri
Hi,

David A. Wheeler (2022-09-18):
> Has anyone looked into adding -D_FORTIFY_SOURCE=3 to some
> applications that directly interact with data from the Internet,
> such as t eh , web browser or parts of the Tor implementation?

I did not, thanks for the pointer!

I've just suggested the Tor Browser team to consider it:
https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40625

As for the tor client, and other software that use the Debian build
system, it'll require changes to the Debian toolchain. I've just
sent a bug report against dpkg-dev to suggest it.

Cheers!
___
Tails-dev mailing list
Tails-dev@boum.org
https://www.autistici.org/mailman/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.