From ff7a3d620193726d571b7638cece139bb2c96b5a Mon Sep 17 00:00:00 2001
From: BurungHantu1605 <privacy@tuta.io>
Date: Tue, 2 Apr 2019 09:46:27 +0800
Subject: [PATCH] #618

---
 _includes/sections/instant-messenger.html | 38 ++++++++++++++++++++++-
 1 file changed, 37 insertions(+), 1 deletion(-)

diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html
index f8d0a92b5..020d3fdeb 100644
--- a/_includes/sections/instant-messenger.html
+++ b/_includes/sections/instant-messenger.html
@@ -32,7 +32,8 @@ <h1 id="im" class="anchor"><a href="#im"><i class="fas fa-link anchor-icon"></i>
   footer="OS: Windows, macOS, Linux."
   description='Ricochet uses the <a href="#browser"><i class="fas fa-link"></i> Tor network</a> to reach your contacts without relying on messaging servers. It creates a hidden service, which is used to rendezvous with
   your contacts without revealing your location or IP address. Instead of a username, you get a unique address that looks like <em>ricochet:rs7ce36jsj24ogfw</em>. Other Ricochet users can use this address to send a contact request - asking to be
-  added to your contacts list.'
+  added to your contacts list.<br>
+  <span class="badge badge-danger">Danger</span> <strong>Always keep Tor up to date. See below: </strong><a href="#ricochetTor"><i class="fas fa-link"></i> Updating the Tor binary included with Ricochet</a>'
   %}
 
 </div>
@@ -58,3 +59,38 @@ <h3>Related Information</h3>
   <li><a href="https://security.stackexchange.com/a/49802">Telegram encryption isn't secure.</a></li>
   <li><a href="https://www.reddit.com/r/privacytoolsIO/comments/6r655i/telegram_isnt_safe/">Telegram is marketed as a private messenger, but it's not private by default.</a></li>
 </ul>
+
+<!-- Updating the Tor binary included with Ricochet -->
+<h3 id="ricochetTor" class="anchor"><a href="#ricochetTor"><i class="fas fa-link anchor-icon"></i></a> Updating the Tor binary included with Ricochet</h3>
+
+Currently there are no known vulnerabilities with Ricochet. The software is safe to use as long as you update the included Tor binary to the latest version.
+
+<ol class="long-string-list">
+  <li>Download the <a href="#browser"><i class="fas fa-link"></i> Tor Browser</a>.</li>
+  <li>Run the Tor Browser installer or extract package for your platform. Windows (.exe), MacOSX (.dmg) and Linux (.tar.bz2).</li>
+  <li>Copy the Tor binary or create a symbolic link to it: </li>
+  <br>
+  <ul>
+      <li><strong>Windows: </strong>Copy the Tor binary included with the Tor Browser and overwrite the old one included with Ricochet.</li>
+      <ul>
+          <li>Tor Browser binary: <code>%HOMEPATH%\Desktop\Tor Browser\Browser\TorBrowser\Tor\tor.exe</code></li>
+          <li>Ricochet's included binary: <code>%HOMEPATH%\Desktop\Ricochet\tor.exe</code></li>
+      </ul>
+      <br>
+      <li><strong>MacOSX: </strong>Assuming you copied the <code>Tor Browser.app</code> and <code>Ricochet.app</code> from their respective .dmg install media to <code>/Applications</code>: <br>
+          Create a symbolic link to the Tor binary in Terminal. Ricochet will continue to use the up to date version of the Tor binary when you update the Tor Browser Bundle.</li>
+      <ul>
+          <li><code>rm ~/Applications/Ricochet.app/Contents/MacOS/tor <br>
+                    ln -s ~/Applications/Tor\ Browser.app/Contents/Resources/TorBrowser/Tor/tor \ <br>
+                          ~/Applications/Ricochet.app/Contents/MacOS/tor</code>
+          </li>
+      </ul>
+      <br>
+      <li><strong>Linux: </strong>Assuming you extracted the Tor Browser Bundle and Ricochet tarball to your home directory:</li>
+      <ul>
+          <li><code>rm ~/ricochet/tor <br>
+                    ln -s ~/tor-browser_en-US/Browser/TorBrowser/Tor/tor ~/ricochet/tor</code>
+          </li>
+      </ul>
+  <ul>
+</ol>
\ No newline at end of file