[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #1676 [Tor bundles/installation]: Audit jabber/XMPP support for pidgin



#1676: Audit jabber/XMPP support for pidgin
--------------------------------------+-------------------------------------
 Reporter:  katmagic                  |          Owner:  ioerror 
     Type:  defect                    |         Status:  assigned
 Priority:  critical                  |      Milestone:          
Component:  Tor bundles/installation  |        Version:          
 Keywords:  pidgin, DNS               |         Parent:  #2918   
   Points:                            |   Actualpoints:          
--------------------------------------+-------------------------------------

Comment(by rubin110):

 So after scratching my brain for a bit, actually rereading much of this
 thread, and a bit of retesting...

 The new build people have been speaking of is Pidgin, the change is a new
 item in the proxy type menu called "Tor/Privacy (SOCKS5)" which seems to
 push DNS through Tor.

 Via the XMPP connection protocol I'm able to make successful connections
 to CCC's jabber server and talk.google.com without any DNS leakage.

 The "GTalk" connection protocol uses gmail.com as the server, which seems
 to choke on making SRV look ups. This is also the case if gmail.com is
 used as the server in the XMPP connection protocol. Basically it fails to
 connect but with no DNS leakage.

 I don't know if whoever packages this could simply rebuild Pidgin with
 talk.google.com in the server spot by default for GTalk instead of
 gmail.com. Additionally I have the feeling if the exit node is terminating
 out of Germany, gmail.com wont actually work, but I could be wrong.

 Also tested under the new Tor/Privacy proxy type was chatting over AIM,
 which worked without issue. Is Tor planning to support any other IM
 protocols? If so I can quickly test the rest of those out too.

 I'm going to poke file transfers and other forms of possibly leakage in a
 bit, with a primary focus on XMPP through CCC and talk.google.com.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1676#comment:37>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs