[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #13671 [Tor Browser]: Circuit display is broken if bridges are being used.



#13671: Circuit display is broken if bridges are being used.
-----------------------------+----------------------------------
     Reporter:  yawning      |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  TorBrowserTeam201411
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------------------

Comment (by asn):

 Replying to [ticket:13671 yawning]:

 > The "design" problem:
 >   Please think Really Hard about if displaying the IP address of a
 user's Bridge (or Guard under normal use for that matter) is an ok thing
 to do.  In the Bridge use case, I'm currently in the "If it does display
 the Bridge IP, I'm going to bother them till they hide it" camp, mainly
 because making it easy for the user to inadvertently spread the IP address
 of the bridge they are using is a bad thing.
 >
 >   I'm open to being convinced otherwise on this, and I'm not sure if
 "the user inadvertently makes the guard they are using public via a
 screenshot" is a privacy concern or not.  This is "less" of an issue since
 that doesn't have the potential to ruin the Guard for other users, unlike
 Bridges.

 I can definitely see why displaying bridges IPs is not a very smart thing
 to do.

 That said, in my experience many bridge users understand the scarcity of
 bridge IPs and they don't just post them on the Internet/pastebin/etc. So
 I hope that this behavior will never actually cause the burn of many
 bridges ( > 100 or so).

 However, it would probably be a good idea to fix this. One of the problems
 here is that if you scrub bridge IPs from the logs, users won't know which
 bridge got blocked so that they can replace it or report it to the Tor
 devs. It would probably require some way for people to unscrub the logs
 for such occasions.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13671#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs