Thaum Lub Peb Hlis 23, 2020, Tor Project tau tshaj tawm qhov hloov tshiab rau Tor Browser rau version 9.0.7, uas kho cov teeb meem kev nyab xeeb hauv Tor router thiab hloov pauv qhov browser tus cwj pwm thaum xaiv qhov chaw nyab xeeb tshaj plaws (Safeest) qib.
Qhov kev nyab xeeb tshaj plaws txhais tau hais tias JavaScript raug kaw los ntawm lub neej ntawd rau txhua qhov chaw. Txawm li cas los xij, vim muaj qhov teeb meem hauv NoScript add-on, qhov kev txwv no tuaj yeem raug hla tam sim no. Raws li kev daws teeb meem, Tor Browser cov tsim tawm tau ua rau nws ua tsis tau rau JavaScript kom khiav thaum teem rau qib siab tshaj plaws.
Qhov no tuaj yeem rhuav tshem Tor Browser qhov kev paub rau txhua tus neeg siv nrog hom kev nyab xeeb siab tshaj plaws tau qhib, vim tias nws tsis tuaj yeem qhib JavaScript los ntawm NoScript chaw.
Yog tias koj xav tau rov qab tus cwj pwm browser yav dhau los, tsawg kawg ib ntus, koj tuaj yeem ua nws manually, raws li hauv qab no:
- Qhib lub tab tshiab.
- Ntaus hais txog: config hauv qhov chaw nyob bar thiab nias Enter.
- Hauv qhov tshawb nrhiav hauv qab qhov chaw nyob bar nkag mus: javascript.enabled
- Muab ob npaug rau ntawm kab ntawv ntxiv, daim teb "Nqi" yuav tsum hloov ntawm qhov tsis tseeb mus rau qhov tseeb
Lub built-in Tor network router tau hloov kho rau version 0.4.2.7. Cov nram qab no shortcomings tau raug kho nyob rau hauv lub tshiab version:
- Kho cov kab laum (CVE-2020-10592) uas tso cai rau leej twg tuaj yeem ua DoS nres ntawm lub relay lossis lub hauv paus directory server, ua rau CPU overload, lossis kev tawm tsam los ntawm cov directory servers lawv tus kheej (tsis yog hauv paus xwb), ua rau CPU overload rau cov neeg siv network zoo tib yam.
Targeted CPU overload yuav pom tseeb siv los tua lub sijhawm tawm tsam, pab kom de-tsis qhia npe cov neeg siv lossis cov kev pabcuam zais. - Tsau CVE-2020-10593, uas tuaj yeem ua rau lub cim xeeb hauv thaj chaw deb uas tuaj yeem ua rau rov siv cov saw hlau qub
- Lwm yam yuam kev thiab omissions
Tau qhov twg los: linux.org.ru ua