[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #3064 [Vidalia]: Vidalia stores ControlPassword as plaintext

#3064: Vidalia stores ControlPassword as plaintext
--------------------------+-------------------------------------------------
    Reporter:  tornewbie  |       Owner:  chiiph  
        Type:  defect     |      Status:  reopened
    Priority:  normal     |   Milestone:          
   Component:  Vidalia    |     Version:          
  Resolution:             |    Keywords:          
      Parent:             |      Points:          
Actualpoints:             |  
--------------------------+-------------------------------------------------

Comment(by tornewbie):

 When tor starts and the ControlPort is set into torrc, it warns about
 setting a password.

 Probably I am wrong but setting a random password could be a really bad
 idea just in case someone is using Vidalia to access his/her own remote
 relay : this could permit to others bad things like , for example,
 changing exit policy at runtime.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3064#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs