Re: [tor-bugs] #13667 [Tor]: Prevent port scanning of hidden services

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#13667: Prevent port scanning of hidden services
------------------------+------------------------------------------
     Reporter:  arma    |      Owner:
         Type:  defect  |     Status:  needs_review
     Priority:  major   |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  SponsorR tor-hs 025-backport
Actual Points:          |  Parent ID:
       Points:          |
------------------------+------------------------------------------

Comment (by nickm):

 Under this patch, won't it be the case that an attacker can still easily
 tell exit-policy failures from a missing application, since exit policy
 failures will make us close the circuit, but missing applications won't?

 If that's the case, I don't know what the reason is for sending
 END_STREAM_REASON_DONE, if we're going to close too.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13667#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs