[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7582 [Tor]: Don't disable exits so harshly for unexpected END_REASON_EXITPOLICY

#7582: Don't disable exits so harshly for unexpected END_REASON_EXITPOLICY
-------------------------------------+--------------------------------------
 Reporter:  nickm                    |          Owner:                    
     Type:  defect                   |         Status:  needs_review      
 Priority:  major                    |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor                      |        Version:                    
 Keywords:  tor-client 023-backport  |         Parent:  #5456             
   Points:                           |   Actualpoints:                    
-------------------------------------+--------------------------------------
Changes (by arma):

 * cc: weasel (added)


Comment:

 On the one hand, I want to ignore this until 0.2.3 expires.

 On the other hand, it's a real attack. We haven't seen it in the wild, but
 it's the sort of targetable attack that we wouldn't necessarily see.

 I bet if we get it a CVE, weasel will be able to convince his peers.

 (Weasel, can you confirm/deny?)

 Also, how big is the 0.2.3 patch? Actually, *is* there an 0.2.3 patch yet?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7582#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs