Author: intrigeri Date: To: The Tails public development discussion list Subject: Re: [Tails-dev] #8999: Claws Mail leaks cleartext of encrypted
email to the IMAP server
intrigeri wrote (07 May 2015 13:44:31 GMT) : > Before publishing, you'll want to check that the attached images don't
> show up in the Atom/RSS feeds.
The attached images did show up on top of the feeds, and the
notification end-users were seeing since the publication of the
advisory was:
* local folders.png
* select inbox.png
* add mailbox.png
Now fixed, in a way that should make our stuff more robust against
such omissions in the future. And applied the robustness improvement
in a few more places as well, because why not.
=> lesson learnt: after publishing a security advisory, boot Tails to
make sure it looks like what you believe it does :)
%20:%0A>%20>%20Before%20publishing,%20you'll%20want%20to%20check%20that%20the%20attached%20images%20don't%0A>%20>%20show%20up%20in%20the%20Atom/RSS%20feeds.%0A>%20%0A>%20The%20attached%20images%20did%20show%20up%20on%20top%20of%20the%20feeds,%20and%20the%0A>%20notification%20end-users%20were%20seeing%20since%20the%20publication%20of%20the%0A>%20advisory%20was:%0A>%20%0A>%20%20*%20local%20folders.png%0A>%20%20*%20select%20inbox.png%0A>%20%20*%20add%20mailbox.png%0A>%20%0A>%20Now%20fixed,%20in%20a%20way%20that%20should%20make%20our%20stuff%20more%20robust%20against%0A>%20such%20omissions%20in%20the%20future.%20And%20applied%20the%20robustness%20improvement%0A>%20in%20a%20few%20more%20places%20as%20well,%20because%20why%20not.%0A>%20%0A>%20=>%20lesson%20learnt:%20after%20publishing%20a%20security%20advisory,%20boot%20Tails%20to%0A>%20make%20sure%20it%20looks%20like%20what%20you%20believe%20it%20does%20:)%0A>%20%0A>%20Cheers,%0A>%20--%20%0A>%20intrigeri%0A>%20%0A>%20 "Reply to this message")