[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #2988 [Tor Relay]: information disclosure: operating system and platform
#2988: information disclosure: operating system and platform
-----------------------+----------------------------------------------------
Reporter: tagnaq | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor Relay | Version:
Keywords: | Parent:
Points: | Actualpoints:
-----------------------+----------------------------------------------------
Comment(by arma):
Yeah, this one is more controversial. (I suspect this trac entry is a
duplicate of several others.)
The trouble is that we actually use this general info for statistics, to
get a sense of network growth, to understand if a certain bug is troubling
certain subsets of our relays only, etc.
We used to provide much more detail, and we pared it down to just OS and
arch. (I believe
Tor 0.2.2.7-alpha and later provide less info about Windows than your
example.)
Making it optional reduces the value to us a lot. Might as well just take
it out if we are to do that.
I'm not convinced that the information we're revealing is increasing the
harm greatly, compared to what you could learn anyway by remote
fingerprinting.
The flip side is a) if you can know exactly what the platform and arch is,
you can do your exploits with less risk of getting noticed, and remote
fingerprinting really isn't perfect, and b) come on, how much value is
there really in knowing this stuff.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2988#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs