Re: [tor-bugs] #2988 [Tor Relay]: information disclosure: operating system and platform

["Tor Bug Tracker & Wiki" <torproject-admin@xxxxxxxxxxxxxx>]

#2988: information disclosure: operating system and platform
-----------------------+----------------------------------------------------
 Reporter:  tagnaq     |          Owner:     
     Type:  defect     |         Status:  new
 Priority:  normal     |      Milestone:     
Component:  Tor Relay  |        Version:     
 Keywords:             |         Parent:     
   Points:             |   Actualpoints:     
-----------------------+----------------------------------------------------

Comment(by arma):

 Replying to [comment:15 Sebastian]:
 > But as soon as we have that info in, relays' versions are again
 detectable (at least in a certain range of versions) because they will
 advertise different capabilities

 The applied security people I talk to make a big deal out of whether the
 identification is exact or almost exact. The distinction is whether your
 exploit has zero chance of being noticed (because you target only and
 exactly the vulnerable versions) or close-to-zero chance of being noticed.
 So I think they would regard "in a certain range of versions" as a huge
 improvement.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2988#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs