[liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

[Jacob Appelbaum]

Joseph Lorenzo Hall:
> 
> On 8/6/13 6:41 AM, Jacob Appelbaum wrote:
>>> (2) Even have an RSS feed of them available through the TBB, as well as RSS
>>> of TBB releases, and what security issues are covred including one advised
>>> by Firefox.  This could notify of stable, alpha and beta releases, so
>>> everyone knows when security updates are available, possibly at the cost of
>>> stability.
>>
>> I like this idea - though I wonder how users would feel about it? Will
>> they read it? Should it be our own RSS feed or an RSS feed of Mozilla's
>> data?
> 
> Not sure if this is practical but the TBB splash screen could give some
> notion of the implications of using an old specific TBB... e.g., with
> the version check return one or more critical vulns that have been
> patched, to warn the user and encourage immediate update?

We do have an update indicator - soon, we'll have an updater as well, I
think. We had a few discussions about it at the TorDev meeting in Munich
last month.

> 
> Frankly, I'm not sure this is solving a problem Tor/TBB has, but it
> strikes me that a warning along the lines of the following for old TBB
> would not be bad: "Holy shit, this TBB is from 12 months ago! You're
> crazy to use such an outdated version. Please update!"
> 

We do put a fairly large message on the splash page. We could probably
improve the warning page based on elapsed time - currently it is just
one page locally stored, I think.

All the best,
Jacob