summaryrefslogtreecommitdiffstats
path: root/wiki/src/security/Iceweasel_exposes_a_rare_User-Agent.ca.po
blob: 2b82cae0185c3b578c383be25ea15653638dc873 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Free Software Foundation, Inc.
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2011-01-07 10:08-0800\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: ENCODING\n"
"Language: \n"

#. type: Plain text
#, no-wrap
msgid "[[!meta date=\"Fri Sep 3 01:15:14 2010\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!meta title=\"Iceweasel exposes a rare User-Agent\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!tag security/fixed]]\n"
msgstr ""

#. type: Plain text
msgid ""
"A Torbutton bug ([[!debbug 595375]]) makes Iceweasel expose a recognizable "
"User-Agent when the \"Spoof US English Browser\" setting is disabled, which "
"is the case in T(A)ILS 0.5."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Impact"
msgstr ""

#. type: Plain text
msgid ""
"System administrators, webmasters and anyone able to read the logs of a "
"website are able to single out, amongst the visitors, the ones that are "
"using an affected Torbutton extension *and* have explicitly disabled the "
"\"Spoof US English Browser\" setting."
msgstr ""

#. type: Plain text
msgid ""
"While T(A)ILS users are obviously not the only ones in this case, such a bug "
"eases fingerprinting."
msgstr ""

#. type: Plain text
msgid ""
"The client IP address recorded in the webserver logs for such a connection "
"is the one of the Tor exit node used by the T(A)ILS user at this time."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Solution"
msgstr ""

#. type: Plain text
msgid "Upgrade to T(A)ILS 0.6."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Mitigation on T(A)ILS 0.5"
msgstr ""

#. type: Plain text
msgid ""
"The following steps need to be done immediately after boot, **before** "
"running Iceweasel."
msgstr ""

#. type: Plain text
msgid "Run the following command in a terminal:"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "\tgksudo gedit /etc/iceweasel/profile/user.js\n"
msgstr ""

#. type: Plain text
msgid "... this opens a text editor. Delete the line that says:"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "\tuser_pref(\"extensions.torbutton.spoof_english\", false);\n"
msgstr ""

#. type: Plain text
msgid "... then save and quit. You can now run Iceweasel."
msgstr ""

#. type: Plain text
msgid ""
"Beware! Changing this setting in the Torbutton preferences window is **not** "
"effective."
msgstr ""

#. type: Title #
#, no-wrap
msgid "Affected versions"
msgstr ""

#. type: Plain text
msgid "Torbutton 1.2.5, included in T(A)ILS 0.5"
msgstr ""