[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] "drop all vulnerable relays from the consensus"

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-talk] "drop all vulnerable relays from the consensus"
From: tagnaq <tagnaq@xxxxxxxxx>
Date: Sun, 15 May 2011 22:38:45 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sun, 15 May 2011 16:40:21 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:message-id:date:from:mime-version:to:subject :content-type:content-transfer-encoding; bh=jUNWvYj1BrbMWuMhCU8K242EQP3VRrwcul1ASho8V9U=; b=sWP8Okj+gR6rdzaWVn8kQVrBZ9ep9vCSeaMfPzfiZJVTjs4tN0JLGjUoKR7nbh49LA hC0Yfd9tQ2VahwR/E7NUvPAlDc5E5j5lER1ItSpXZ6AI1sujY9sDhHv0dOCtDt45uaYk pA+8eWKUCIZ/iFimkOP7mh3gQUIXwBwzur/sI=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:mime-version:to:subject:content-type :content-transfer-encoding; b=HPSKok8Bw9He6TeJjTYGDbNejCB9wYrJ4IgBPa3utlsUF5PWhVviEMJQJ0I9gPhSAQ Ci6urcCABKonxWbbTZyVEYuaocdmoYpNzscDco6S6Wc3mgxrHH643omh0eDed12fERNC MK83Q0x+nH9JN5uDKaZPgwlFiqiTOnwB6cP4U=
List-archive: <http://lists.torproject.org/pipermail/tor-talk>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "This mailing list is for all discussion about theory, design, and development of Onion Routing." <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

"If someone publishes or demonstrates a code-exec exploit [...] we
should drop all vulnerable relays from the consensus" [1]

- - Does Tor provide Authority Directories with an easy way to reject/drop
relays from the consensus based on the platform string or is this only
possible based on FP or IP?

- - How will Directory Authorities determine if a relay is "vulnerable"?
(inspecting the platform string only)?

thanks,
tagnaq


[1] #2751


CVE-2011-0427
CVE-2010-1676
-----BEGIN PGP SIGNATURE-----

iF4EAREKAAYFAk3QOdUACgkQyM26BSNOM7bRhgD/VeeAefHnfTK+PzdBMOThwchd
w18WFpZDw3Y6BcMXY3ABALRzOc6gSYcBER5Zp5XVyq6h2ShpEdhovFZ0PgjWLocJ
=gSvm
-----END PGP SIGNATURE-----
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] "drop all vulnerable relays from the consensus"
  - From: Marsh Ray
- Re: [tor-talk] "drop all vulnerable relays from the consensus"
  - From: Roger Dingledine

Prev by Author: [tor-talk] automatic updates?
Next by Author: [tor-talk] detecting harmful relays
Previous by thread: Re: [tor-talk] Logging in to Yahoo e-mail accounts now failing???
Next by thread: Re: [tor-talk] "drop all vulnerable relays from the consensus"
Index(es):
- Author
- Thread