[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: user vulnerability in directory data?

To: or-talk@xxxxxxxxxxxxx
Subject: Re: user vulnerability in directory data?
From: "John Kimble" <det.j.kimble@xxxxxxxxx>
Date: Thu, 7 Dec 2006 08:39:09 +0800
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Wed, 06 Dec 2006 19:39:19 -0500
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=NRYdhyWn3+6zGUdoWYyQipUBVYZ9OcDtBgSfJwOVXEN+lu0APAcqOsbQCmrcfS8BygBh+ZbEwRWuXL8xgGQk1zaLCQIKLvre2HVy9YRpNEk192CRqxGZMll6GQEoLhUwEKpnhM/P370VuAU9Ti4nleP6BpAbYexyK3839S1glYU=
In-reply-to: <20061206224948.GL9743@totoro.wangafu.net>
References: <1838515872.20061206154641@gmail.com> <20061206224948.GL9743@totoro.wangafu.net>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On 12/7/06, Nick Mathewson <nickm@xxxxxxxxxxxxx> wrote:
[...]


Here's what Tor stores in the data directory.  I've tried to annotate
the security implications of stuff, but I might have missed
something.

[...]

For completeness, though it's probably not very common for Torpark
users to set up hidden services, there's also hidden_service/hostname
and hidden_service/private_key. It's rather damaging if an adversary
can get hold of these.

- John

Follow-Ups:
- Re: user vulnerability in directory data?
  - From: Nick Mathewson

References:
- user vulnerability in directory data?
  - From: Arrakistor
- Re: user vulnerability in directory data?
  - From: Nick Mathewson

Prev by Author: Re: Bootstraping Tor manually to get past the Great Firewall
Next by Author: Windows-specific bug? cached-routers ignored on start-up
Previous by thread: Re: user vulnerability in directory data?
Next by thread: Re: user vulnerability in directory data?
Index(es):
- Author
- Thread