[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27822 [Applications/Tor Browser]: TBA is leaking DNS
#27822: TBA is leaking DNS
-----------------------------------------+--------------------------
Reporter: cypherpunks3 | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-mobile tbb-proxy-bypass | Actual Points:
Parent ID: #21863 | Points:
Reviewer: | Sponsor:
-----------------------------------------+--------------------------
Comment (by cypherpunks3):
Steps to reproduce this bug:
1. Record DNS requests
2. Open some websites in TBA
I opened a few websites in TBA and recorded the DNS replies using tcpdump.
I opened ebay.com, craigslist.org, netflix.com, bing.com, twitter.com,
pinterest.com, torproject.org, 3g2upl4pq6kufc4m.onion (duckduckgo onion
address)
Here are the logs
`q: A? ir.ebaystatic.com. 1/0/0 ir.ebaystatic.com. [5m] A 92.123.82.129
(51)`
`q: A? copenhagen.craigslist.dk. 1/0/0 copenhagen.craigslist.dk. [1h] A
208.82.237.2 (58)`
`q: A? assets.nflxext.com. 1/0/0 assets.nflxext.com. [5m] A 2.18.232.136
(52)`
`q: A? www.bing.com. 1/0/0 www.bing.com. [5m] A 13.107.21.200 (46)`
`q: A? abs.twimg.com. 1/0/0 abs.twimg.com. [5m] A 104.244.46.199 (47)`
`q: A? s.pinimg.com. 1/0/0 s.pinimg.com. [5m] A 23.35.115.223 (46)`
`q: A? www.torproject.org. 1/0/0 www.torproject.org. [5m] A 138.201.14.197
(52)`
`q: A? 3g2upl4pq6kufc4m.onion. 1/0/0 3g2upl4pq6kufc4m.onion. [1m] A
10.255.165.235 (56)`
These replies only appear if DNS is leaking.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27822#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs