I use Tor browser on Ubuntu and every time it updates, I have to download and unpack the binaries again. This is a bit annoying, so I would prefer to use a PPA. I found this ppa by the webupd8team, but how safe is it to install from this source when compared from installing from the Tor website. Has the Tor foundation released an official word on this?
Add a comment
|
1 Answer
As far as I see it, the package file brings its own version of the Tor Browser Bundle. So if you want to make sure that someone didn't change anything you'd have to check the integrity for yourself. If you don't do this the maintainer can inject arbitrary code into his TBB version.
A better way would be to download the TBB archive directly from torproject.org and check its integrity. This way you can be sure that you receive an unmodified version.
If you just care about updating TBB, I would recommend torbrowser-launcher (Ubuntu package). This downloads TBB is a safe way and updates your installation.
answered Sep 18, 2014 at 9:45
