[tor-bugs] #2659 [Vidalia]: Vidalia should let Torbutton NEWNYM

[Tor Bug Tracker & Wiki]

#2659: Vidalia should let Torbutton NEWNYM
-------------------------+--------------------------------------------------
 Reporter:  mikeperry    |          Owner:  chiiph  
     Type:  enhancement  |         Status:  accepted
 Priority:  major        |      Milestone:          
Component:  Vidalia      |        Version:          
 Keywords:               |         Parent:          
   Points:               |   Actualpoints:          
-------------------------+--------------------------------------------------

Comment(by rransom):

 Replying to [comment:6 Sebastian]:
 > Replying to [ticket:2659 mikeperry]:
 > > 2. Create a 'Least Privilege' Control Port that does not require
 authentication, that implements a safe subset of the Tor control port,
 including SIGNAL NEWNYM.
 >
 > Executing newnym commands without authentication doesn't sound very
 safe.

 More concretely: An attacker who can connect to Tor's SOCKS port and this
 ‘safe’ control port can send `SIGNAL NEWNYM` repeatedly until Tor starts
 sending traffic to an exit node that the attacker controls.  Or, an
 attacker can mark the client's traffic with a distinctive pattern of exit-
 node changes, and buy an ad server's logs later to identify the user's
 pseudonym.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2659#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online