[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Advisory: Stack disclosure in hidden services logs when SafeLogging disabled

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Advisory: Stack disclosure in hidden services logs when SafeLogging disabled
From: Toralf Förster <toralf.foerster@xxxxxx>
Date: Mon, 18 Sep 2017 19:19:15 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Mon, 18 Sep 2017 13:19:31 -0400
In-reply-to: <CAKDKvuxmG3rnO=_FinfqVPEk3D2Y0ErKx+wxOegDnvTtW0o6=A@mail.gmail.com>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <CAKDKvuxmG3rnO=_FinfqVPEk3D2Y0ErKx+wxOegDnvTtW0o6=A@mail.gmail.com>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 09/18/2017 03:41 PM, Nick Mathewson wrote:
>   This bug can only happen when the SafeLogging option is disabled,
>   and SafeLogging is enabled by default.  If you have not disabled
>   SafeLogging, then you should be fine.

Which should not hinder everybody to upgrade, b/c affected relay admins would upgrade soon and therefore expose themself to run hidden services, right ?


- -- 
Toralf
PGP C4EACDDE 0076E94E
-----BEGIN PGP SIGNATURE-----

iI0EAREIADUWIQQaN2+ZSp0CbxPiTc/E6s3eAHbpTgUCWcAAExccdG9yYWxmLmZv
ZXJzdGVyQGdteC5kZQAKCRDE6s3eAHbpTrElAP4if87KebrqxcIpcrhLH9804WrN
PmAxydgGlFvdr3mxCQD/TKtphCgjPWf+/A3Ybdrg92/pfzyWWzheUW9MnlH5hUk=
=Tnpf
-----END PGP SIGNATURE-----
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] Advisory: Stack disclosure in hidden services logs when SafeLogging disabled
  - From: Nick Mathewson

References:
- [tor-relays] Advisory: Stack disclosure in hidden services logs when SafeLogging disabled
  - From: Nick Mathewson

Prev by Author: Re: [tor-relays] bwauths doesn't reach reliable my relay
Next by Author: Re: [tor-relays] bwauths doesn't reach reliable my relay
Previous by thread: [tor-relays] Advisory: Stack disclosure in hidden services logs when SafeLogging disabled
Next by thread: Re: [tor-relays] Advisory: Stack disclosure in hidden services logs when SafeLogging disabled
Index(es):
- Author
- Thread