[tor-bugs] #2355 [Tor Client]: Change UseBridges to prevent any access attempts of public tor network
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Tue May 31 08:47:10 UTC 2011
#2355: Change UseBridges to prevent any access attempts of public tor network
-----------------------------------+----------------------------------------
Reporter: anonym | Type: defect
Status: needs_review | Priority: major
Milestone: Tor: 0.2.2.x-final | Component: Tor Client
Version: | Keywords:
Parent: | Points:
Actualpoints: |
-----------------------------------+----------------------------------------
Comment(by anonym):
Replying to [comment:28 arma]:
> Replying to [comment:17 anonym]:
> > When bridges should be used, allow only configured bridges as entries.
>
> I thought we did this already -- see e.g. #2511. Can you describe the
remaining bug, symptoms you see, how to reproduce, etc?
I had a brief look on your bug2511 branch but I have never looked into
that part of the Tor sources (the precise logic of what routerlist
effects) so I cannot say anything with reassurance without a deeper look
(which I am afraid I won't have time for today). But if your fix
guarantees that at any point when Tor must use only bridges (i.e.
UseBridges set to 1, or [UseBridges set to auto and some bridges are
configured]), only configured bridges will be picked as entries, then it
should be ok -- after all, that's the only thing my patch does, although
more explicitly.
Replying to [comment:33 nickm]:
> Replying to [comment:32 arma]:
> > Major points:
> >
> > - 6c528a1b7415e should not be in there. A different version of it is
already in maint-0.2.2.
Yes, in commit 073fed06c458f.
> > - f602eab961b2 seems to have snuck in too. I don't yet believe that it
does anything good.
If you think your fix for #2511 already fixes this I trust you.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2355#comment:35>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list