News for hackers. Stuff that matters.

A comment on Security Vulnerability in Tor Browser. Parent comment

Re:Security Vulnerability in Tor Browser by dveditz_ on Wednesday May 25, 2022 @07:33PM (#31512261)
We are not aware of any such thing. As rebelwebmaster noted, when we know that we put it in our advisory.

Clearly the vulnerabilities are exploitable as demonstrated by Manfred Paul's winning Pwn2Own entry. The details were disclosed only to Zero Day Initiative staff (the contest organizers) and Mozilla. They have not been discovered on any website in the wild.

[ Parent | on HN ]
Re:Security Vulnerability in Tor Browser by dveditz_ on Thursday May 26, 2022 @01:29PM (#31521096)
Tails has updated their advisory to remove that statement: https://tails.boum.org/security/prototype_pollution/index.en...
[ Parent | on HN ]
Re:Security Vulnerability in Tor Browser by SubzeroCarnage on Thursday May 26, 2022 @05:46AM (#31516436)
Perhaps Tails copy/pasted the page from an older notice?

Although the two patches have now been public for ~6 days at this point.

[ Parent | on HN ]
Re:Security Vulnerability in Tor Browser by dredmorbius on Thursday May 26, 2022 @04:34AM (#31516043)
Who are "we" here?
[ Parent | on HN ]
Re:Security Vulnerability in Tor Browser by AlexSW on Thursday May 26, 2022 @05:47AM (#31516443)
Judging by the post and the user's post history, almost certainly 'we' refers to Mozilla.
[ Parent | on HN ]
Re:Security Vulnerability in Tor Browser by dredmorbius on Thursday May 26, 2022 @01:01PM (#31520734)
Post history suggested at best ex- Mozilla to me.
[ Parent | on HN ]