Re: [tor-dev] [Proposal] A simple way to make Tor-Browser-Bundle more portable and secure

2016-10-29 Thread Yawning Angel
On Sat, 29 Oct 2016 11:51:03 -0200 Daniel Simon wrote: > > Solution proposed - Static link the Tor Browser Bundle with musl > > libc.[1] It is a simple and fast libc implementation that was > > especially crafted for static linking. This would solve both > > security and portability issues. This

Re: [tor-dev] [Proposal] A simple way to make Tor-Browser-Bundle more portable and secure

2016-10-29 Thread Tom Ritter
On May 9, 2016 9:15 AM, "Daniel Simon" wrote: > > Hello. > > How it's currently done - The Tor Browser Bundle is dynamically linked > against glibc. > > Security problem - The Tor Browser Bundle has the risk of information > about the host system's library ecosystem leaking out onto the > network.

Re: [tor-dev] [Proposal] A simple way to make Tor-Browser-Bundle more portable and secure

2016-10-29 Thread Jessica Frazelle
There must already be a version of Tor working with musl since there are Alpine Linux packages for Tor. I'm sure they dynamically link but it's seems like patching that would be the way to go. https://pkgs.alpinelinux.org/package/edge/community/x86_64/tor On Oct 29, 2016 06:51, "Daniel Simon" wr

Re: [tor-dev] [Proposal] A simple way to make Tor-Browser-Bundle more portable and secure

2016-10-29 Thread Daniel Simon
Anyone got further into this? It would be a joint-project between musl and tor organizations. Maybe for GSoC 2017 if nobody works on it until then? On Mon, May 9, 2016 at 11:15 AM, Daniel Simon wrote: > Hello. > > How it's currently done - The Tor Browser Bundle is dynamically linked > against g