Remove the TZ timezone environment variable Torbutton FAQ entry, as it only applied to Firefox 3.0, which is now past End-of-Life.
Mike Perry

Mike Perry commited on 2010-06-30 04:56:50
Zeige 1 geänderte Dateien mit 5 Einfügungen und 17 Löschungen.

... ...
@@ -311,24 +311,12 @@ forgery attacks.
311 311
 <strong><a class="anchor" href="#securityissues">Are there any other issues I should be concerned about?</a></strong>
312 312
 
313 313
 <p>
314
+
314 315
 There are a few known security issues with Torbutton (all of which are due to
315
-<a href="design/index.html#FirefoxBugs">unfixed
316
-Firefox security bugs</a>). The most important for anonymity is that it is
317
-possible to unmask the javascript hooks that wrap the Date object to conceal
318
-your timezone in Firefox 2, and the timezone masking code does not work at all
319
-on Firefox 3. We are working with the Firefox team to fix one of <a
320
-href="https://bugzilla.mozilla.org/show_bug.cgi?id=392274">Bug 399274</a> or
321
-<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=419598">Bug 419598</a>
322
-to address this. In the meantime, it is possible to set the <b>TZ</b>
323
-environment variable to <b>UTC</b> to cause the browser to use UTC as your
324
-timezone. Under Linux, you can add an <b>export TZ=UTC</b> to the
325
-/usr/bin/firefox script, or edit your system bashrc to do the same. Under
326
-Windows, you can set either a <a
327
-href="http://support.microsoft.com/kb/310519">User or System Environment
328
-Variable</a> for TZ via My Computer's properties. In MacOS, the situation is
329
-<a
330
-href="http://developer.apple.com/documentation/MacOSX/Conceptual/BPRuntimeConfig/Articles/EnvironmentVars.html#//apple_ref/doc/uid/20002093-BCIJIJBH">a
331
-lot more complicated</a>, unfortunately.
316
+<a href="design/index.html#FirefoxBugs">unfixed Firefox security bugs</a>).
317
+However, most of these relate to fingerprinting issues, as opposed to outright
318
+anonymity leaks.
319
+
332 320
 </p>
333 321
 
334 322
 <p>
335 323