[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #7706 [Tor]: Excluded Tor nodes are still being used when their "Country" location field is "?"
#7706: Excluded Tor nodes are still being used when their "Country" location field
is "?"
----------------------------+-----------------------------------------------
Reporter: bugcatcher | Owner:
Type: enhancement | Status: closed
Priority: major | Milestone: Tor: 0.2.4.x-final
Component: Tor | Version: Tor: 0.2.4.6-alpha
Resolution: implemented | Keywords: GeoIP, relay, security, vulnerability tor-client
Parent: | Points:
Actualpoints: |
----------------------------+-----------------------------------------------
Changes (by nickm):
* status: needs_review => closed
* resolution: => implemented
Comment:
Replying to [comment:10 arma]:
> Replying to [comment:7 andrea]:
> > I think the choice of default behavior to exclude unknowns if the user
wants any country excluded, but include an option to change it, is
probably the right thing.
>
> Sounds fine to me (mostly because I think people who exclude by country
are generally doing a foolish thing, and so I don't much care what happens
to them).
Merged into master; thanks for having a look!
> We should not fool ourselves into thinking we have resolved a big
security issue though: if an attacker wants to put his relay into a
particular country, the geoip db's are pretty easy to game.
I concur; this is more a UI matter and a least-surprise matter than a
security fix.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7706#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs