[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #6297 [Tor Client]: SOCKS issues with bitcoin in .2.3.18-rc vs .2.2.37

#6297: SOCKS issues with bitcoin in .2.3.18-rc vs .2.2.37
-------------------------+--------------------------------------------------
 Reporter:  jrmithdobbs  |          Owner:                   
     Type:  defect       |         Status:  needs_information
 Priority:  normal       |      Milestone:                   
Component:  Tor Client   |        Version:  Tor: 0.2.3.18-rc 
 Keywords:               |         Parent:                   
   Points:               |   Actualpoints:                   
-------------------------+--------------------------------------------------

Comment(by jrmithdobbs):

 That's true. Hadn't considered that.

 With that in mind maybe there should just be a very big warning in the man
 page/related documentation about the risks of binding the SocksPort to
 something external clients have access to. (Maybe with a mention of
 SocksPolicy + *authenticated* ipsec transport connections or similar as a
 workaround?)

 This isn't really a preventable scenario so long as it's non-loopback and
 there's any chance at all of a malicious user on the network.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6297#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs