[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: Yahoo Mail and Tor
On 07/09/2009 01:36 PM, Lee wrote:
>>> enable-remote-toggle 0
>>> enable-remote-http-toggle 0
>>> enable-edit-actions 0
>>> allow-cgi-request-crunching 0
>> I'm trying to find the email thread, but until then, even with these
>> set, it was demonstrated someone can manipulate your privoxy config by
>> making your tor client pass strings from localhost.
The best thread I can find on this topic is
My memory of the details recalls that even with everything set to 0,
there was something that could enable the admin interface by referrer
spoofing, and then you've lost.
However, I can't find the details so, perhaps it's time to check out the
current versions of privoxy and re-evaluate. I'd love to stop shipping
a powerpc-only privoxy with the osx bundles, at a minimum.
The Tor Project