[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #2722 [Tor Hidden Services]: TunnelDirConns option affects hid_serv_get_responsible_directories

#2722: TunnelDirConns option affects hid_serv_get_responsible_directories
---------------------------------+------------------------------------------
 Reporter:  rransom              |          Owner:  rransom            
     Type:  defect               |         Status:  new                
 Priority:  blocker              |      Milestone:  Tor: 0.2.1.x-final 
Component:  Tor Hidden Services  |        Version:  Tor: 0.2.2.23-alpha
 Keywords:                       |         Parent:                     
   Points:                       |   Actualpoints:                     
---------------------------------+------------------------------------------
Changes (by rransom):

  * priority:  normal => blocker
  * milestone:  => Tor: 0.2.1.x-final


Comment:

 The fix for this is to revert
 [https://gitweb.torproject.org/tor.git/commitdiff/9a7098487b2c25f36112b3521758f42621dcd6af
 commit 9a7098487b2c25f36112b3521758f42621dcd6af] (first released in
 0.2.1.6-alpha).  That earlier commit claimed to be a 'bugfix'; if it
 really was, then Tor clients were connecting directly to HSDir nodes to
 upload and fetch hidden service descriptors, which is a '''major'''
 information leak.

 Raising priority to 'blocker' until we know how serious this problem is.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2722#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs