[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #22068 [Core Tor/Torsocks]: Make it explicit that Torsocks won't work correctly in certain scenarios in the README



#22068: Make it explicit that Torsocks won't work correctly in certain scenarios in
the README
-----------------------------------+---------------------
     Reporter:  Franciscouzo       |      Owner:  dgoulet
         Type:  defect             |     Status:  new
     Priority:  Medium             |  Milestone:
    Component:  Core Tor/Torsocks  |    Version:
     Severity:  Normal             |   Keywords:
Actual Points:                     |  Parent ID:
       Points:                     |   Reviewer:
      Sponsor:                     |
-----------------------------------+---------------------
 As far as I understand, Torsocks works by setting LD_PRELOAD, so an
 application that doesn't uses libc, and instead uses syscalls directly
 will be able to bypass torsocks and connect directly to the Internet.

 I think a warning about it on the README file, and MAN page is needed,
 besides making it explicit that using Torsocks is not 100% safe as the
 README might make you think, for example:

 > ''Torsocks allows you to use most applications in a safe way with Tor.
 It ensures that DNS requests are handled safely and explicitly rejects any
 traffic other than TCP from the application you're using.''
 > Torsocks is an ELF shared library that is loaded before all others. The
 library overrides every needed Internet communication libc function calls
 such as connect(2) or gethostbyname(3).
 > ''This process is transparent to the user and if torsocks detects any
 communication that can't go through the Tor network such as UDP traffic,
 for instance, the connection is denied. If, for any reason, there is no
 way for torsocks to provide the Tor anonymity guarantee to your
 application, torsocks will force the application to quit and stop
 everything.''

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22068>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs