Silk Road forums

Discussion => Security => Topic started by: Christy Nugs on January 08, 2013, 05:09 am

Title: is it just me or has tor linux version.....
Post by: Christy Nugs on January 08, 2013, 05:09 am
is it just me or has Tor linux version had more than one update this week?
i only check the sigs - i dont save them!
please tell me ima crazy.....
Title: Re: is it just me or has tor linux version.....
Post by: SelfSovereignty on January 08, 2013, 05:16 am
So, I'm not sure what you mean?  Are you saying that the download was replaced with another one, but the version number is the same?
Title: Re: is it just me or has tor linux version.....
Post by: astor on January 08, 2013, 05:24 am
The last two updates are:

0.2.3.25-1 -- Dec 3
0.2.3.25-2 -- Jan 7

As confirmed by the Tor Blog (there's always a post when a new version comes out, even for a minor update like this)

https://blog.torproject.org/blog/new-tor-browser-packages-tor-023-upgrade
https://blog.torproject.org/blog/new-tor-browser-bundles-and-tor-0247-alpha-packages-available
Title: Re: is it just me or has tor linux version.....
Post by: SelfSovereignty on January 08, 2013, 05:32 am
Well actually... the blog post was made on the 6th.  Not the 7th?
Title: Re: is it just me or has tor linux version.....
Post by: astor on January 08, 2013, 05:35 am
Well goddamn SS if you want to be technical about it. :) Guess it depends on the time zone of their server and your time zone. All the comments are on the 7th though, so it was probably late on the 6th.
Title: Re: is it just me or has tor linux version.....
Post by: SorryMario on January 08, 2013, 05:37 am
Yes, there were two updated versions released pretty close together, 2.3.25-1 and then 2.3.25-2. The latter was due to the TURKTRUST CA issue (two of the certificates in Firefox)

Quote
https://blog.torproject.org/blog/new-tor-browser-bundles-and-tor-0247-alpha-packages-available
New Tor Browser Bundles and Tor 0.2.4.7-alpha packages available

All of the Tor Browser Bundles have been updated to Firefox 10.0.12esr in order to address the recent problems with TurkTrust certificates. From Mozilla's post:

    TURKTRUST, a certificate authority in Mozilla’s root program, mis-issued two intermediate certificates to customers. TURKTRUST has scanned their certificate database and log files and confirmed that the mistake was made for only two certificates.

    This is not a Firefox-specific issue. Nevertheless, we are concerned that at least one of the mis-issued intermediate certificates was used for man-in-the-middle (MITM) traffic management of domain names that the customer did not legitimately own or control. We are also concerned that the private keys for these certificates were not kept as secure as would be expected for intermediate certificates.

All users are strongly encouraged to upgrade.

There was also a new Tor 0.2.4.7-alpha release and all alpha packages have been updated with that.
Title: Re: is it just me or has tor linux version.....
Post by: SelfSovereignty on January 08, 2013, 05:38 am
LOL!  Well I just don't know where you got the date of the d/l being the 7th, but when somebody starts putting conspiracy ideas in my head, I start looking for inconsistencies.  I didn't mean anything by it :)
Title: Re: is it just me or has tor linux version.....
Post by: astor on January 08, 2013, 05:43 am
Yes, there were two updated versions released pretty close together, 2.3.25-1 and then 2.3.25-2.

0.2.3.25-1 came out in early December. I don't think there were two updates recently, like in the last week.
Title: Re: is it just me or has tor linux version.....
Post by: astor on January 08, 2013, 05:46 am
LOL!  Well I just don't know where you got the date of the d/l being the 7th, but when somebody starts putting conspiracy ideas in my head, I start looking for inconsistencies.  I didn't mean anything by it :)

TBH, I got the 7th from the time stamp on my tarball. Then I went a found the blog post but didn't double check. So you caught me. The conspiracy was my laziness. :)
Title: Re: is it just me or has tor linux version.....
Post by: SorryMario on January 08, 2013, 05:58 am
Yes, there were two updated versions released pretty close together, 2.3.25-1 and then 2.3.25-2.

0.2.3.25-1 came out in early December. I don't think there were two updates recently, like in the last week.
That's odd. I checked my download history and I got the 2.3.25-1 on 12/25 (but it's possible I was just late upgrading it). I remember ignoring the "New Update Available" message for a while... maybe I wasn't worried about it yet because I hadn't been *ahem* perusing the 'Road much before then  ;D
Title: Re: is it just me or has tor linux version.....
Post by: Christy Nugs on January 08, 2013, 06:26 am
ok ima sorry i freaked out - i use 2 comps - one windows and one linux i was confused.
really didin't mean to do all this!
thanks for the quick response...
really

ima glad i was wrong!