[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #26353 [Applications/Tor Browser]: First request after copying and pasting an URL in URL bar seems to go over the catch-all circuit

To: undisclosed-recipients: ;
Subject: Re: [tor-bugs] #26353 [Applications/Tor Browser]: First request after copying and pasting an URL in URL bar seems to go over the catch-all circuit
From: "Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>
Date: Sun, 15 Jul 2018 05:48:04 -0000
Auto-submitted: auto-generated
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sun, 15 Jul 2018 01:48:15 -0400
In-reply-to: <042.5d4637c24564fb4d64ad624d9640a1b3@torproject.org>
List-archive: <http://lists.torproject.org/pipermail/tor-bugs/>
List-help: <mailto:tor-bugs-request@lists.torproject.org?subject=help>
List-id: "auto: Tor bug tracker status mails" <tor-bugs.lists.torproject.org>
List-post: <mailto:tor-bugs@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs>, <mailto:tor-bugs-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-bugs>, <mailto:tor-bugs-request@lists.torproject.org?subject=unsubscribe>
References: <042.5d4637c24564fb4d64ad624d9640a1b3@torproject.org>
Reply-to: no-reply@xxxxxxxxxxxxxx, tor-assistants@xxxxxxxxxxxxxx
Sender: "tor-bugs" <tor-bugs-bounces@xxxxxxxxxxxxxxxxxxxx>

#26353: First request after copying and pasting an URL in URL bar seems to go over
the catch-all circuit
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  ff60-esr, tbb-linkability,           |  Actual Points:
  TorBrowserTeam201807R                          |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by arthuredelstein):

 * keywords:  ff60-esr, tbb-linkability => ff60-esr, tbb-linkability,
     TorBrowserTeam201807R
 * status:  new => needs_review


Comment:

 I tracked this down to a speculative connect. It also occurs if the user
 enters a search term or types in a full http or https URL.

 Here's a patch that disables the speculative connect for now:
 https://github.com/arthuredelstein/tor-browser/commit/26353

 I have also opening a bug on bugzilla to try to track down exactly why FPI
 is violated here: https://bugzilla.mozilla.org/show_bug.cgi?id=1475811

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26353#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs