None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
The client IP address recorded in the webserver logs for such a connection is the one of the Tor exit node used by the T(A)ILS user at this time.
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Torbutton 1.2.5, included in T(A)ILS 0.5
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Affected versions
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
... then save and quit. You can now run Iceweasel.
9 years ago
None

Resource updated

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
The "wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.ca.po" file was changed. 9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
While T(A)ILS users are obviously not the only ones in this case, such a bug eases fingerprinting.
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
[[!meta title="Iceweasel exposes a rare User-Agent"]]
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
[[!tag security/fixed]]
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
A Torbutton bug ([[!debbug 595375]]) makes Iceweasel expose a recognizable User-Agent when the "Spoof US English Browser" setting is disabled, which is the case in T(A)ILS 0.5.
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
Impact
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.*.po
  3. Catalan
System administrators, webmasters and anyone able to read the logs of a website are able to single out, amongst the visitors, the ones that are using an affected Torbutton extension *and* have explicitly disabled the "Spoof US English Browser" setting.
9 years ago
None

Resource updated

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
The "wiki/src/security/IP_address_leak_with_icedove.ca.po" file was changed. 9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
Any amnesia release until, and including, 0.3. amnesia 0.4 is not affected.
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
[[!meta title="Icedove (Thunderbird) leaks the real IP address"]]
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
[[!tag security/fixed]]
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
Impact
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
the SMTP relay's administrators;
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
When using a NAT-ed Internet connection, the disclosed IP is a local network one (e.g. 192.168.1.42), which usually does not reveal too much. On the other hand, when connecting directly to the Internet, e.g. using a PPP or DSL modem and no router, the disclosed IP truly reveals the location of the amnesia user.
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
Solution
9 years ago
None

Source string added

  1. Tails
  2. wiki/src/security/IP_address_leak_with_icedove.*.po
  3. Catalan
Upgrade to [[amnesia 0.4.1|news/version_0.4.1]], that ships with Claws Mail instead of Icedove, **and** set the following preferences in `~/.claws-mail/accountrc` for every account:
9 years ago

Search