[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #6545 [Tor Client]: Isolation level may be funky and share circuits?

#6545: Isolation level may be funky and share circuits?
---------------------------------+------------------------------------------
    Reporter:  sdjfjsdfiuhszduh  |       Owner:                    
        Type:  defect            |      Status:  closed            
    Priority:  normal            |   Milestone:  Tor: 0.2.3.x-final
   Component:  Tor Client        |     Version:                    
  Resolution:  invalid           |    Keywords:                    
      Parent:                    |      Points:                    
Actualpoints:                    |  
---------------------------------+------------------------------------------

Comment(by sdjfjsdfiuhszduh):

 Replying to [comment:13 rransom]:
 > Replying to [comment:11 sdjfjsdfiuhszduh]:
 > > .NET (which is ridiculously easy to use and lets me hack up code as
 fast as python) doesn't support SOCKs directly (Both HttpWebRequest and
 the higher level WebClient).
 >
 > Is the source code for these
 modules/components/classes/objects/whatevers available?  Have you audited
 them to check for DNS-query leaks and other anonymity risks?
 >
 > What you do with your own computer and its configuration is really none
 of our business (except to the extent that we need to know about it in
 order to understand/verify/resolve a bug report), but you seem to be the
 same person that wrote an âencrypted PMâ application which uses Tor, and
 DNS leaks (or other anonymity flaws) in that application could put other
 people at risk, too.

 I did write that and this had nothing to do with that. Except just
 learning more about tor and playing around. I'm very unsure how to check
 DNS leaks. For the app i written I actually didn't consider blocking out
 onion URLs if there are no proxies being used. I actually just use a TCP
 socket, use dns to connect to the address UNLESS there is a proxy in which
 case I plug the domain through the proxy. So you're only at risk if you
 forget to configure the socks proxy and use a secretive url.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6545#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs