[tor-bugs] #8657 [Tor]: Bad russian exit node attacks connections to Wikipedia

Sat Apr 6 20:06:58 UTC 2013

#8657: Bad russian exit node attacks connections to Wikipedia
-------------------------+--------------------------------------------------
 Reporter:  cypherpunks  |          Owner:     
     Type:  defect       |         Status:  new
 Priority:  blocker      |      Milestone:     
Component:  Tor          |        Version:     
 Keywords:               |         Parent:     
   Points:               |   Actualpoints:     
-------------------------+--------------------------------------------------
 I detected a man-in-the-middle attack due to a bad exit node.

 While connecting encryptedly to a web page of Wikipedia, the TorBrowser
 produces a SSL certificate warning.

 Name of the exit node: Unnamed
 IP address: 176.99.10.92
 Location: Russia

 CN: main.authority.com
 O: Main Authority
 OU: Certificate Management

 Issued on: 03/14/2013
 Expires on: 03/14/2014

 SHA1 fingerprint:
 0C:FF:4C:A3:5E:F3:A7:64:20:1F:55:0B:32:3F:96:81:91:65:0F:ED
 MD5 fingerprint: 65:EE:3C:09:75:0D:E5:32:22:2F:0B:3C:7D:8C:A4:72

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8657>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online