Delivery-Date: Mon, 09 Mar 2015 04:47:57 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	T_RP_MATCHES_RCVD,URIBL_BLOCKED autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id ABDFD1E0063
	for <archiver@seul.org>; Mon,  9 Mar 2015 04:47:55 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id D122A340EC;
	Mon,  9 Mar 2015 08:47:51 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 643F8340ED
 for <tor-talk@lists.torproject.org>; Mon,  9 Mar 2015 08:47:48 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 6jeqSrHi0XbL for <tor-talk@lists.torproject.org>;
 Mon,  9 Mar 2015 08:47:48 +0000 (UTC)
Received: from bilestoad.getfoxyproxy.org (bilestoad.getfoxyproxy.org
 [162.243.99.25])
 by eugeni.torproject.org (Postfix) with ESMTP id 4AB3133F9C
 for <tor-talk@lists.torproject.org>; Mon,  9 Mar 2015 08:47:48 +0000 (UTC)
Received: from www.example.com (tor-exit.kakapo.dk [82.211.223.3])
 by bilestoad.getfoxyproxy.org (Postfix) with ESMTPSA id 07BED12159E
 for <tor-talk@lists.torproject.org>; Mon,  9 Mar 2015 08:47:42 +0000 (UTC)
Message-ID: <54FD5E20.8060905@torproject.org>
Date: Mon, 09 Mar 2015 08:47:28 +0000
From: Georg Koppen <gk@torproject.org>
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <54f8a95e.4f3.eabe6700.533b4973@t-3.net>
 <54FB3241.1050309@cyblings.on.ca> <54FB4B04.9000208@tlbean.com>
 <12020d5fa639f2e0f66b9f79eeccb97b@cryptolab.net>
 <54FB6674.9060505@tlbean.com>
In-Reply-To: <54FB6674.9060505@tlbean.com>
Subject: Re: [tor-talk] TorBrowserBundle
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============8827506026911346400=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============8827506026911346400==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="gpvFhRjccL1r7gXJvVs6NrIebP94befIS"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--gpvFhRjccL1r7gXJvVs6NrIebP94befIS
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Travis Bean:
> Integrating the web browser into the operating system is essential for
> automatic security updates. From a computer security standpoint, this i=
s
> what bothers me the most about the current Alpha phase that
> TorBrowserBundle is in. If a web browser is not integrated with the OS
> and is not kept up-to-date on a regular basis, this creates a HUGE
> security hole for hackers to exploit the OS by finding a weakness in th=
e
> web browser and injecting malware into the HTTP stream.

Which is why we release every couple of weeks a new Tor Browser and use
the Tor Browser updater to keep the necessary user interaction at a
minimum. Integration of Tor Browser into the operating system (whatever
that exactly means) is orthogonal to having automatic security updates.
(This does not say anything about that integration being worthwhile or
not, though.)

Georg

Georg



--gpvFhRjccL1r7gXJvVs6NrIebP94befIS
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=hoIX
-----END PGP SIGNATURE-----

--gpvFhRjccL1r7gXJvVs6NrIebP94befIS--

--===============8827506026911346400==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============8827506026911346400==--

