[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Tor is out

Tor is runningÂsinceÂyesterday!
Thanks Tor for support us in Iran

On Sun, Jan 30, 2011 at 10:30 AM, Roger Dingledine <arma@xxxxxxx> wrote:
Tor fixes a few more less-critical security issues. The
main other change is a slight tweak to Tor's TLS handshake that makes
relays and bridges that run this new version reachable from Iran again.
We don't expect this tweak will win the arms race long-term, but it will
buy us a bit more time until we roll out a better solution.

Anybody running a relay or bridge who wants it to work for Iran should


Changes in version - 2011-01-25
Âo Major bugfixes:
 Â- Fix a bounds-checking error that could allow an attacker to
  Âremotely crash a directory authority. Bugfix on
  ÂFound by "piebeer".
 Â- Don't assert when changing from bridge to relay or vice versa
  Âvia the controller. The assert happened because we didn't properly
  Âinitialize our keys in this case. Bugfix on; fixes
  Âbug 2433. Reported by bastik.

Âo Minor features:
 Â- Adjust our TLS Diffie-Hellman parameters to match those used by
  ÂApache's mod_ssl.
 Â- Provide a log message stating which geoip file we're parsing
  Âinstead of just stating that we're parsing the geoip file.
  ÂImplements ticket 2432.

Âo Minor bugfixes:
 Â- Check for and reject overly long directory certificates and
  Âdirectory tokens before they have a chance to hit any assertions.
  ÂBugfix on / Found by "doorss".

Version: GnuPG v1.4.9 (GNU/Linux)