Reading email contents for mentions of Tor bridges.

Specifically targeting Tor directory servers.

In their analysis of the divulged data, the team accuses the NSA of, among other things: The top-secret documents were apparently obtained and studied by members of the Tor project and security specialists for German broadcasters NDR and WDR. “For example, after you visit a malicious website, an attacker controlling this website might access the password or other sensitive information that you send to other websites afterwards during the same Tails session.” reads the alert published by project maintainers.Alleged leaked documents about the NSA's XKeyscore snooping software appear to show the paranoid agency is targeting Tor and Tails users, Linux Journal readers – and anyone else interested in online privacy.Īt the heart of the claims is this sample configuration file for the XKeyscore system. The Tails team pointed out that the flaw doesn’t break the anonymity and encryption of Tor connections, this means that it is still safe and anonymous to access websites from Tails if the users don’t share sensitive information with them. “If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context.” reads the advisory. The CVE-2022-1802 vulnerability can allow an attacker to set up a rogue website to bypass some of the security built in Tor Browser and access information from other websites. The Tor browser is based on the Firefox browser and is developed as part of the Tor Project.

CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype pollution.

CVE-2022-1802: Prototype pollution in Top-Level Await implementation.

The vulnerabilities were reported by Manfred Paul during the Pwn2Own 2022 hacking contest that took place in Vancouver last week: The root cause of the alert is a couple of critical zero-day issues, tracked as CVE-2022-1802 and CVE-2022-1529, in the Firefox browser that was addressed by Mozilla in May.

Tails is a security and privacy-oriented Linux distribution, it is a portable operating system that protects against surveillance and censorship.

“ We recommend that you stop using Tails until the release of 5.1 (May 31) if you use Tor Browser for sensitive information (passwords, private messages, personal information, etc.).” reads the advisory published by project maintainers.

What is tor tails