Firefox onreadystatechange Event DocumentViewerImpl Use After Free

This module exploits a vulnerability found on Firefox 17.0.6, specifically a use after free of a DocumentViewerImpl object, triggered via a specially crafted web page using onreadystatechange events and the window.stop API, as exploited in the wild on 2013 August to target Tor Browser users. Modu...

Firefox security bug (proxy-bypass) in current Tor BBs

https://blog.torproject.org/blog/firefox-security-bug-proxy-bypass-current-tbbs "A user has discovered a severe security bug in Firefox related to websockets bypassing the SOCKS proxy DNS configuration. This means when connecting to a websocket service, your Firefox will query your local DNS...

Tor Browser Bundle information leakage

Debugging logging is always on...

Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

"There is an EVIL bug in at least the Linux 2.2.35-8 Tor Browser Bundle start-tor-browser script. It will log things like domain names to a file in the root of the browser bundle." https://trac.torproject.org/projects/tor/ticket/5417 Ticket 5417 new defect RelativeLink.sh in Tor browser bundle ha...

Student Charged With Posting Counterfeit Coupons to 4Chan

A student at New York’s Rochester Institute of Technology RIT has been arrested for producing hundreds of thousands of dollars worth of fake coupons and posting them to 4chan and other websites. Lucas Henderson, a 22-year old computer security student from Lubbock, Texas was charged with wire fra...