Re: Firefox,Torbutton leaks real IP Address.

To: or-talk@xxxxxxxxxxxxx

Subject: Re: Firefox,Torbutton leaks real IP Address.

From: Curious Kid <letsshareinformation@xxxxxxxxx>

Date: Thu, 4 Dec 2008 09:38:18 -0800 (PST)

Delivered-to: archiver@xxxxxxxx

Delivered-to: or-talk-outgoing@xxxxxxxx

Delivered-to: or-talk@xxxxxxxx

Delivery-date: Thu, 04 Dec 2008 12:38:24 -0500

Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=jL9ikDoNx7wlYKLrGzR6ysdkKTACkxiqceZTjw2fUktGrDeiX++lXcyaPDi2yv7nQWq5lumWSAGGfLv47Ti24djxxtdVxEXFjy567nH+Tq9mR9u1IDQVUKR9TZazK1tgXGGlmCKeSnJ0baX1tIfDhgeh2idMeteSi0JBIIdDvos=;

References: <133904.2885.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>

Reply-to: or-talk@xxxxxxxxxxxxx

Sender: owner-or-talk@xxxxxxxxxxxxx

The "Are you using Tor?" page at http://check.torproject.org/ sometimes tells me that I am not using Tor, even with Tor and Torbutton running. It has only done that soon after starting Tor and the browser.

From: Luis Maceira <luis_a_maceira@xxxxxxxxx>
To: or-talk@xxxxxxxx
Sent: Wednesday, December 3, 2008 2:15:27 PM
Subject: Firefox,Torbutton leaks real IP Address.

The combination Firefox-3.0.3(in fact,Iceweasel-3.0.3),Torbutton-1.2.0 leaks my real IP

address.This happens BETWEEN when I initiate Tor-0.2.0.31 with the bash command

/usr/local/tor/bin/tor and the moment when Tor effectively establishes a connection-circuit.

This can be 60 seconds or more,and if in between we connect to the Internet with

Firefox-Torbutton the real IP address is used(even with torbutton running-green)

I tested with www.showmyip.com and others.My fear is if the same could happen when Tor changes circuit by ten-ten minutes or so,when leaves the previous circuit to the next one.(what happens in the transition moments).I did not test that situation.

Thanks.