[tor-bugs] #11728 [TorBirdy]: Torbirdy shouldn't allow clearnet connections on startup if started in Transparent Torification mode
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sun May 4 18:49:51 UTC 2014
#11728: Torbirdy shouldn't allow clearnet connections on startup if started in
Transparent Torification mode
----------------------------+-------------------------
Reporter: mttp | Owner: ioerror
Type: defect | Status: new
Priority: major | Milestone:
Component: TorBirdy | Version:
Keywords: identity-leaks | Actual Points:
Parent ID: | Points:
----------------------------+-------------------------
Here's the situation: Alice uses Torbirdy in "Transparent Torification"
mode to check her email on her laptop with her Tor router at home. She
later takes her laptop to an internet cafe and checks her email there. As
soon as she opens Thunderbird, a connection is made in the clear to her
email provider before she has a chance to change Torbirdy's settings to
"Use Tor Onion Router". This is an identity leak, and Torbirdy should
prevent this possibility.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11728>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list