+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) (/Thread-Community-Warning-TOR-Browser-can-leak-your-real-IP-Linux-Mac)
Pages:
1
2
{Community Warning} TOR Browser can leak your real IP (Linux & Mac) - S3xySmurf - 11-05-2017
Came across this TOR browser can leak your real IP the vulnerability dubbed TorMoil was privately reported to the TOR Deva and the released an updated browser 7.0.9 update now.
This vulnerability only affects Linux and Mac surprising enough Windows users are safe.
The details of this vulnerability aren't public at the moment.
The flaw is centered around the way Firefox handles "file://" URLs if a malicious URL is clicked you can be redirected to a specially crafted page and leak your IP all over the place, it's not thought to be exploited in the wild but the lack of evidence doesn't mean its not being actively exploited protect all your base guys/girls/Cybernetic Beings.
https://www.hackread.com/flaw-in-tor-browser-leads-to-leaking-of-your-real-ip-address/
https://thehackernews.com/2017/11/tor-browser-real-ip.html?m=1
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - zorrophreak - 11-05-2017
Alright. That is terrifying. Just to confirm that browser update 7.0.9 does patch this?
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - mothered - 11-05-2017
My VPN first connects to the Tor network, so If I were affected, It'll be my VPN's IP address leaked.
I'm very surprised the Windows platform Is safe.
Thanks for Info, I'll look Into It further.
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - S3xySmurf - 11-05-2017
(11-05-2017, 10:46 AM)zorrophreak Wrote: Alright. That is terrifying. Just to confirm that browser update 7.0.9 does patch this?
Yeah the latest 7.0.9 fixes this but the alpha will be patched on Monday, Sunday is a rest day after all.
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - Oni - 11-05-2017
Not exactly surprised about this. Sort of how using anything Flash/Java would also have similar results.
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - mothered - 11-07-2017
(11-05-2017, 06:11 PM)Oni Wrote: Sort of how using anything Flash/Java would also have similar results.
In terms of my day-to-day (non-malicious) navigation around the net, that's one of the first things I've disabled In all browsers.
JavaScript plays a significant role In the prevention of browser fingerprinting, WebRTC, location, OS, connection leaks etc.
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - Altair - 11-07-2017
Leaking or not, connecting the Tor with your real IP not a good idea. I'm using VPN all the time
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - Synthx - 11-07-2017
I think I saw this headline in my RSS feed reader from the hacker news. I didn't read it though. I'm not 100% surprised about this, although its still somewhat surprising. I don't really use TOR too much, although I do every once in a while. Thanks for the share!
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - Drako - 11-07-2017
Isn't that ironic, for once Windows users are safe using Tor. Now people will most likely be torn about what OS to use. Although if anything just use Tails. It's probably the best to browse the 'Deep Web' out there. To be honest If I wouldn't have came across this thread I wouldn't know a thing about this exploit. Thanks for sharing this with everyone!
RE: {Community Warning} TOR Browser can leak your real IP (Linux & Mac) - S3xySmurf - 11-07-2017
(11-07-2017, 08:41 AM)Altair Wrote: Leaking or not, connecting the Tor with your real IP not a good idea. I'm using VPN all the time
I know using a VPN can add a second layer of protection when using TOR but I don't really trust any third parties unless I have complete control over the server I'm passing through at least that way you can erase logs if needed.