[Pkg-mozext-commits] [SCM] torbutton Debian packaging branch, master, updated. debian/1.4.6.3-1

[Jérémy Bobbio]

The following commit has been merged in the master branch:
commit ebe73e47907f40e603798cc796b55b4c5b8cc0a1
Author: Jérémy Bobbio <lunar at debian.org>
Date:   Tue Oct 16 21:19:24 2012 +0200

    Add a debian/NEWS file, ask users to switch to TBB

diff --git a/debian/NEWS b/debian/NEWS
new file mode 100644
index 0000000..d472de0
--- /dev/null
+++ b/debian/NEWS
@@ -0,0 +1,19 @@
+torbutton (1.4.6.3-1) unstable; urgency=high
+
+  Security fixes introduced in Iceweasel 10.0.8esr prevents Torbutton
+  from hooking window properties. This means that using this package
+  is no longer substantially different from disabling websockets,
+  disabling plugins, and using Private Browsing Mode to prevent disk
+  leaks.
+
+  Due to the very strong risk of fingerprinting and the resulting
+  reduction of the anonymity set, it is more than strongly advised to
+  uninstall this package and use the TorBrowserBundle instead. The later
+  can be downloaded at:
+
+      https://www.torproject.org/projects/torbrowser.html.en
+
+  The TorBrowser also includes several changes in Firefox itself that
+  address other possible leaks and fingerprinting issues.
+
+ -- Jérémy Bobbio <lunar at debian.org>  Tue, 16 Oct 2012 20:33:40 +0200

-- 
torbutton Debian packaging