Skip to main content

Tor Users Targeted With Firefox Zero-Day Exploit

  • November 30, 2016
  • 2 replies
  • 251 views

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
By Eduard Kovacs on November 30, 2016 A JavaScript exploit leveraging a zero-day vulnerability in Firefox has been spotted in attacks aimed at Tor users. Mozilla and Tor Browser developers are expected to quickly release updates that address the security hole.

The existence of the exploit, which is said to consist of one HTML and one CSS file, was first reported on the Tor Project mailing list. Tor Project co-founder and president Roger Dingledine said Mozilla is aware of the issue and is working on a patch. The Tor Browser, which is based on Firefox, will also be updated as soon as Mozilla releases the fix. Full Article

2 replies

  • Community Guide
  • 5988 replies
  • November 30, 2016
I use Firefox, good to see they are on top of this issue.

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
By Tom Spring November 30, 2016
 
Update The Tor Project has provided a browser update that patches a zero-day vulnerability being exploited in the wild to de-anonymize Tor users.
 
“The security flaw responsible for this urgent release is already actively exploited on Windows systems. Even though there is currently, to the best of our knowledge, no similar exploit for OS X or Linux users available, the underlying bug affects those platforms as well,” the Tor Project said in its announcement. “Thus we strongly recommend that all users apply the update to their Tor Browser immediately. A restart is required for it to take effect.”
 
Full Article