The malware exploits a serious JavaScript security vulnerability affecting Firefox and other products that share the same code base, including the Tor Browser. Tor’s ‘standard’ setting enabled JavaScript by default, which users can upgrade to either ‘safer’, which disables JavaScript on non-HTTPS sites, or ‘safest’, which disables JavaScript completely.An attack against Tor Browser users on Windows machines was discovered this Sunday, and there is speculation that the uncovered malware was used by a law enforcement agency to harvest the IP addresses of users of several hidden services hosted by Freedom Hosting. Verify that NoScript is activated again.required line in the results to set its value to false. Open the address about:config in Tor Browser.You can now go back to the about:addons page and the NoScript and HTTPS Everywhere extensions should be enabled. Once you do that, the setting should be set to false. required, right-click on it, and select Toggle. Tor’s ‘standard’ setting enabled JavaScript by default, which users can upgrade to either ‘safer’, which disables JavaScript on non-HTTPS sites, or ‘safest’, which disables JavaScript completely. Whether the issue matters depends on how users have configured Tor to treat JavaScript. It’s a widely used language that makes the web what it is today, allowing for websites to be more responsive, dynamic, and interactive. You Probably Don’t Need to Disable JavaScript With that in mind, we recommend against disabling JavaScript, unless you have a really good reason to (like your job requires it).
Many Tor users are not technically savvy, and JavaScript is commonly used with HTML5 in modern web sites. The only reason the Tor project allows JavaScript to be on by default in the Tor browser is usability.
required entry to false by double clicking it.
0 kommentar(er)
