[tor-bugs] #9072 [Tor]: #9063 enables Guard discovery in about an hour by websites (was: #9063 enables Guard discovery of 0.2.4.x clients in about an hour by websites)

[Tor Bug Tracker & Wiki]

#9072: #9063 enables Guard discovery in about an hour by websites
----------------------+-----------------------------------------------------
 Reporter:  arma      |          Owner:                     
     Type:  defect    |         Status:  new                
 Priority:  critical  |      Milestone:  Tor: 0.2.3.x-final 
Component:  Tor       |        Version:  Tor: 0.2.4.13-alpha
 Keywords:            |         Parent:                     
   Points:            |   Actualpoints:                     
----------------------+-----------------------------------------------------
Changes (by mikeperry):

  * priority:  major => critical


Comment:

 Actually, this is *all* clients. Bob pointed out that it is their Guards
 who have to upgrade for them to be vulnerable, not them.

 Pretty bad stuff.

 Perhaps we should remove #9063 and save it for Gaurds who actually
 experience OOMing?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9072#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online