Re: HTML5 deanonymization attacks

2009-11-20 Thread Marco Bonetti
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Perry wrote: > Do you have the test cases for the offline application protocol > handler registration? I'm curious if Torbutton will still block them > from bypassing the proxy or delaying themselves from running until > post-toggle, even if you c

Re: HTML5 deanonymization attacks

2009-11-20 Thread Marco Bonetti
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregory Maxwell wrote: > It's not clear from the slides exactly how the video tags are supposed > to be bypassing tor. Is this saying that the poster attribute bypasses > the proxy settings? It doesn't appear to do so here for me in > Firefox. Firefox

Re: HTML5 deanonymization attacks

2009-11-20 Thread Mike Perry
Thus spake Marco Bonetti (marco.bone...@slackware.it): > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Mike Perry wrote: > > Do you have the test cases for the offline application protocol > > handler registration? I'm curious if Torbutton will still block them > > from bypassing the proxy

Tor Browser Bundle 1.2.10 released

2009-11-20 Thread Andrew Lewman
On November 20, we released an updated Tor Browser Bundle, version 1.2.10, which includes: * updated Vidalia to 0.2.6 * updated Pidgin to 2.6.3 * updated Tor to 0.2.1.20 * updated Firefox to 3.0.15 * updated OpenSSL to 0.9.8l * updated libevent to 1.4.13 You can download t