[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #1082 [Polipo]: Information leaks
#1082: Information leaks
----------------------+-----------------------------------------------------
Reporter: loafier | Owner: loafier
Type: defect | Status: closed
Priority: minor | Milestone:
Component: Polipo | Version: 1.0
Resolution: wontfix | Keywords:
Parent: |
----------------------+-----------------------------------------------------
Changes (by phobos):
* status: new => closed
* resolution: None => wontfix
Old description:
> Polipo adds the hostname, listening port, and local time in the footer
> of error messages. An adversary might be able to gather this information
> in a script and use it to narrow down the identity of the user.
>
> http://pseudo-flaw.net/content/defcon/dc-17-demos/
>
> There may be other areas where Polipo leaks information.
>
> [Automatically added by flyspray2trac: Operating System: All]
New description:
Polipo adds the hostname, listening port, and local time in the footer
of error messages. An adversary might be able to gather this information
in a script and use it to narrow down the identity of the user.
http://pseudo-flaw.net/content/defcon/dc-17-demos/
There may be other areas where Polipo leaks information.
[Automatically added by flyspray2trac: Operating System: All]
--
Comment:
Juliusz has taken over polipo maintenance again. He's asked the authors
of existing bugs to email them to his mailing list at
https://lists.sourceforge.net/lists/listinfo/polipo-users
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1082#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs