Tor hacked

A group of Italian hackers, We Are Segment, hacked Tor last week. Fortunately enough, they handled the algorithm to Tor staff. Here's the translation of an article appeared on Repubblica.it: https://translate.google.com/translate?sl=it&tl=en&js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fwww.repubblica.it%2Feconomia%2F2017%2F11%2F03%2Fnews%2Fazienda_di_cibersicurezza_italiana_viola_l_anonimato_di_tor_la_rete_mondiale_per_le_navigazioni_segrete_sul_web-180132987%2F&edit-text=&act=url

What a soykaf op. No details and link to Google translated news story from a non-tech media outlet. A security company called WeAreSegment privately disclosed a vulnerability in Tor Browser to the Tor project. The bug allows arbitrary webpages to reveal your real IP address (assuming you are not using additional protection such as Tails or Whonix). The bug only affects Linux and OSX and has been fixed in the latest Tor Browser release. https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/ >TorBrowser version 7.0.8, and probably prior,for Mac OS X and Linux, is affected by a critical security issue. According to the Tor Project, further details will be released in the near future. >Due to a Firefox bug in handling file:// URLs it is possible on both systems that users leak their IP address. Once an affected user navigates to a specially crafted web page, the operating system may directly connect to the remote host, bypassing Tor Browser.

>OOOOH SPOOKY TOR IZ HAXED >it'a a browser-specific hole every time

>>3101 >Once an affected user navigates to a specially crafted web page, the operating system may directly connect to the remote host, bypassing Tor Browser. If the exploit uses a component of the operating system or desktop environment to bypass Tor Browser then Tails might be vulnerable too because they do have a sort of clearnet escape hatch in their firewall rules don't they?

Agent FUD is working overtime again.

>>3103 The company behind this is milking it for all the publicity the can. If the vulnerability also affected Tails they would be screaming about it.

This is a poor thread. Linking to Google is against the very ideals of this board. The vulnerability is also, apparently, minor. This thread is locked.