Re: [tor-bugs] #3064 [Vidalia]: Vidalia stores ControlPassword as plaintext

["Tor Bug Tracker & Wiki" <torproject-admin@xxxxxxxxxxxxxx>]

#3064: Vidalia stores ControlPassword as plaintext
--------------------------+-------------------------------------------------
    Reporter:  tornewbie  |       Owner:  chiiph  
        Type:  defect     |      Status:  reopened
    Priority:  normal     |   Milestone:          
   Component:  Vidalia    |     Version:          
  Resolution:             |    Keywords:          
      Parent:             |      Points:          
Actualpoints:             |  
--------------------------+-------------------------------------------------

Comment(by chiiph):

 Replying to [comment:7 tornewbie]:
 > When tor starts and the ControlPort is set into torrc, it warns about
 setting a password.
 >
 > Probably I am wrong but setting a random password could be a really bad
 idea just in case someone is using Vidalia to access his/her own remote
 relay : this could permit to others bad things like , for example,
 changing exit policy at runtime.
 >

 If you are using Vidalia to access a remote relay, then you shouldn't use
 a random password, since next time you'll try to access you won't be able
 to.
 But other than that, I fail to see how setting a random password would
 make it change the exit policy.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3064#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs