[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7706 [Tor]: Excluded Tor nodes are still being used when their "Country" location field is "?"

#7706: Excluded Tor nodes are still being used when their "Country" location field
is "?"
--------------------------------------------------------------+-------------
 Reporter:  bugcatcher                                        |          Owner:                    
     Type:  enhancement                                       |         Status:  needs_review      
 Priority:  major                                             |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor                                               |        Version:  Tor: 0.2.4.6-alpha
 Keywords:  GeoIP, relay, security, vulnerability tor-client  |         Parent:                    
   Points:                                                    |   Actualpoints:                    
--------------------------------------------------------------+-------------

Comment(by arma):

 Replying to [comment:7 andrea]:
 > I think the choice of default behavior to exclude unknowns if the user
 wants any country excluded, but include an option to change it, is
 probably the right thing.

 Sounds fine to me (mostly because I think people who exclude by country
 are generally doing a foolish thing, and so I don't much care what happens
 to them).

 We should not fool ourselves into thinking we have resolved a big security
 issue though: if an attacker wants to put his relay into a particular
 country, the geoip db's are pretty easy to game.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7706#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs