Anonymous user asked on the Tor blog post where TorMoil is introduced:
Tails users and users of our sandboxed-tor-browser are unaffected, though.
In addition to Whonix users, right?
Although the users have got the answer “Yes”, but should we have our own Whonix Security Bulletins? Example, Qubes Security Bulletins.
From my understanding, almost all of the IP leaking vulnerabilities that affect Tor Browser users does not affect Whonix users at all. However:
- This may be a great way to promote Whonix.
- There are still security vulnerability that affect Whonix users, like the apt-get upgrading security issue.
If we need a Whonix security bulletin, where should we publish the security bulletins on? Github and/or Whonix Blog? What would be the format of the bulletin? Who may be able to write that? How we can cooperate with each other?
If it is considered as a good idea, I am willing to help to write such bulletins? Does anyone else would like to do it, too? Because the vulnerabilities are found randomly in terms of time, the more people can help to do it, the more likely Whonix can respond quickly. 