The Tor browser is said to forged on the Firebox browser which is an open source introduced by the Mozilla foundation. No sooner did the Officials of Mozilla named Daniel Veditz came to know of this problem, he posted on his blog assuring that the issues has been fixed in some currently issued versions of Mozilla Firefox for all the popular users. He further disclosed that the attack code has been discovered who did the exploitation and measures are being taken against it.
The mishap revealed codes when the targets fed malicious JavaScript related to vector graphics. The culprit sent the IP and MAC address of the target to the server, which controlled attacks. The code resembled the technique which investigated network used by law-enforcing agencies, specially that which identified Tor-protected users who seemed to propagate child pornography.
Further similar step was taken in this regard and it was discovered this vulnerability reducing measure was created by FBI or some law-implementing agency. This shows that how restricted government hacking can become a serious threat to the larger web as anyone can use it to attack Firefox users. A different Mozilla security has proved that it can also affect Mozilla’s Thunderbolt e-mail applications and also the extended support version of Firefox used by Tor browsers. It was suggested that this flaw existed in the browser since five years.
The ridiculous load given by the exploit of code-execution is very much similar to that of FBI which it used in 2013 to discover the ones who used trade child pornography via Tor-anonymized website. The source code to the Tor group was absolutely complete, the exploit could be made easily available to lots of people which they manage to use by making slight changes to it.
Other than an update for Firefox an update to NoScript, which is an extension of Firefox in relation to the Top Browser was also released. NoScript is useful, as it does not allow the users to opt for the sites that can and cannot use JavaScript in the browser. Later for privacy reasons the Tor browser installed NoScript in such a manner that permitted all sites to affiliate JavaScript in the browser. Though this point in terms of privacy is still not clear.
It is advisable that the Firefox and Tor users should fix their problems at once. The users are considered to be protected from the attack by keeping the Firefox security to highest level, that may restrict few sights but it is proven safe.
