[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #17188 [Tor]: Tor should warn users when traveling backwards through time
#17188: Tor should warn users when traveling backwards through time
-------------------------+---------------------
Reporter: hdevalence | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone:
Component: Tor | Version:
Keywords: security | Actual Points:
Parent ID: | Points:
Sponsor: |
-------------------------+---------------------
An attacker can do evil things by rewinding a user's clock, without having
to own their machine (e.g., NTP attacks).
Tor maintains a monotonic clock to prevent rewinding attacks while Tor is
running. Tor also keeps some persistent information about the user's time
in the state file, in the LastWritten field.
On launch, if Tor sees that the system time has been rewound to before the
LastWritten time, it should warn the user that something strange is
happening. However, Tor should not update the monotonic clock or fail to
launch, since the user may have changed the time deliberately.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17188>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs