[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #1676 [Tor bundles/installation]: Pidgin leaks DNS requests when using the XMPP protocol.

#1676: Pidgin leaks DNS requests when using the XMPP protocol.
--------------------------------------+-------------------------------------
 Reporter:  katmagic                  |       Owner:  erinn   
     Type:  defect                    |      Status:  assigned
 Priority:  normal                    |   Milestone:          
Component:  Tor bundles/installation  |     Version:          
 Keywords:  pidgin, DNS               |      Parent:          
--------------------------------------+-------------------------------------
Changes (by rransom):

  * owner:  helix => erinn


Comment:

 If the Pidgin developers don't fix this -- and it looks to me like they
 either don't care or don't understand that leaking DNS requests when a
 proxy is specified is a security hole -- then we have several options:

 1. write a patch for Pidgin ourselves, and patch Pidgin in TIMBB and/or
 shove the patch upstream
 2. stop shipping Pidgin's XMPP plugin in TIMBB
 3. replace Pidgin in TIMBB with less broken IM/IRC clients
 4. stop shipping TIMBB and explain why on the blog

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1676#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs