summaryrefslogtreecommitdiffstats
path: root/wiki/src/security.es.po
diff options
context:
space:
mode:
authorIkiWiki::Plugin::po::change <IkiWiki::Plugin::po::change@web>2009-12-07 10:32:31 +0000
committeramnesia <webmaster@amnesia.boum.org>2009-12-07 10:32:31 +0000
commit3cbc632317512ad4c90f1798fb398efc6627fab7 (patch)
tree65956a545555fbfdf423d39150eb9d90859c5523 /wiki/src/security.es.po
parent01b7924c4822023b761091088dec4bec16d8c30d (diff)
updated PO files
Diffstat (limited to 'wiki/src/security.es.po')
-rw-r--r--wiki/src/security.es.po125
1 files changed, 109 insertions, 16 deletions
diff --git a/wiki/src/security.es.po b/wiki/src/security.es.po
index 7663d63..efafec3 100644
--- a/wiki/src/security.es.po
+++ b/wiki/src/security.es.po
@@ -7,7 +7,7 @@
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2009-11-23 20:18+0000\n"
+"POT-Creation-Date: 2009-12-07 10:32+0000\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
@@ -22,6 +22,114 @@ msgstr ""
#. type: Title #
#, no-wrap
+msgid "Current holes"
+msgstr ""
+
+#. type: Title ##
+#, no-wrap
+msgid "Icedove (Thunderbird) leaks the real IP address"
+msgstr ""
+
+#. type: Plain text
+msgid ""
+"The Torbutton extension installed in amnesia being incompatible with Icedove "
+"(Thunderbird), the real IP address of the computer is disclosed to the SMTP "
+"relay that is used to send e-mail."
+msgstr ""
+
+#. type: Title ###
+#, no-wrap
+msgid "Impact"
+msgstr ""
+
+#. type: Plain text
+msgid ""
+"When using Icedove to send e-mail, the computer's real IP address is "
+"disclosed to the SMTP relay, that usually writes it down to a `Received:` "
+"header inside outgoing e-mail. This private information is therefore "
+"disclosed to:"
+msgstr ""
+
+#. type: Bullet: '* '
+msgid "the SMTP relay's administrators;"
+msgstr ""
+
+#. type: Bullet: '* '
+msgid ""
+"anyone who is able to read such a sent e-mail, including: anyone the e-mail "
+"is sent to, various network and e-mail servers administrators."
+msgstr ""
+
+#. type: Plain text
+msgid ""
+"When using a NAT-ed Internet connection, the disclosed IP is a local network "
+"one (e.g. 192.168.1.42), which usually does not reveal too much. On the "
+"other hand, when connecting directly to the Internet, e.g. using a PPP or "
+"DSL modem and no router, the disclosed IP truly reveals the location of the "
+"amnesia user."
+msgstr ""
+
+#. type: Title ###
+#, no-wrap
+msgid "Solution"
+msgstr ""
+
+#. type: Plain text
+msgid "None yet."
+msgstr ""
+
+#. type: Title ###
+#, no-wrap
+msgid "Mitigation"
+msgstr ""
+
+#. type: Plain text
+msgid ""
+"Best is to avoid using Icedove (Thunderbird) in amnesia until fixed images "
+"are released. If not possible:"
+msgstr ""
+
+#. type: Bullet: '* '
+msgid ""
+"Use amnesia behind a NAT-ed Internet connection, inside a LAN that uses "
+"widespread IP addresses."
+msgstr ""
+
+#. type: Bullet: '* '
+msgid ""
+"Use a trustworthy, privacy-friendly SMTP relay that does not write down the "
+"client's IP address anywhere, especially in e-mail headers."
+msgstr ""
+
+#. type: Plain text
+msgid ""
+"Note that using GnuPG does not fix this problem at all: GnuPG only encrypts "
+"the e-mail body, the e-mail headers being always kept in clear."
+msgstr ""
+
+#. type: Title ###
+#, no-wrap
+msgid "Affected versions"
+msgstr ""
+
+#. type: Plain text
+msgid "Any amnesia release until, and including, 0.3."
+msgstr ""
+
+#. type: Title #
+#, no-wrap
+msgid "Probable holes"
+msgstr ""
+
+#. type: Plain text
+msgid ""
+"Until an [[audit|todo/applications_audit]] of the bundled network "
+"applications is done, information leakages at the protocol level should be "
+"considered as − at the very least − possible."
+msgstr ""
+
+#. type: Title #
+#, no-wrap
msgid "Fixed holes"
msgstr ""
@@ -51,11 +159,6 @@ msgid ""
"load it, and the firewall-level Tor enforcement is therefore not effective."
msgstr ""
-#. type: Title ###
-#, no-wrap
-msgid "Impact"
-msgstr ""
-
#. type: Plain text
msgid ""
"Some applications establish direct connections through the Internet, not "
@@ -82,20 +185,10 @@ msgid ""
"any other application, such as Pidgin or Thunderbird, is probably affected."
msgstr ""
-#. type: Title ###
-#, no-wrap
-msgid "Solution"
-msgstr ""
-
#. type: Plain text
msgid "This problem has been fixed in [[Git]] commit 9c425e8de13e6b4f885."
msgstr ""
-#. type: Title ###
-#, no-wrap
-msgid "Affected versions"
-msgstr ""
-
#. type: Plain text
msgid "No released amnesia version is affected."
msgstr ""