[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #1676 [Tor bundles/installation]: Pidgin leaks DNS requests when using the XMPP protocol.

#1676: Pidgin leaks DNS requests when using the XMPP protocol.
--------------------------------------+-------------------------------------
 Reporter:  katmagic                  |       Owner:  erinn   
     Type:  defect                    |      Status:  assigned
 Priority:  normal                    |   Milestone:          
Component:  Tor bundles/installation  |     Version:          
 Keywords:  pidgin, DNS               |      Parent:          
--------------------------------------+-------------------------------------

Comment(by phobos):

 Replying to [comment:5 rransom]:
 > If the Pidgin developers don't fix this -- and it looks to me like they
 either don't care or don't understand that leaking DNS requests when a
 proxy is specified is a security hole -- then we have several options:
 >
 > 1. write a patch for Pidgin ourselves, and patch Pidgin in TIMBB and/or
 shove the patch upstream
 > 2. stop shipping Pidgin's XMPP plugin in TIMBB
 > 3. replace Pidgin in TIMBB with less broken IM/IRC clients
 > 4. stop shipping TIMBB and explain why on the blog

 I vote for #4.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1676#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs