[tor-bugs] #25477 [Core Tor/Tor]: Stop warning users about bug #21018
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Mar 13 16:02:26 UTC 2018
#25477: Stop warning users about bug #21018
------------------------------+--------------------------------
Reporter: asn | Owner: (none)
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.4.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords: tor-hs tor-client
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------+--------------------------------
While working on #14389 we figured out that when a Tor client connects to
an onion service with authorization without the proper authorization
client config (or non-existent auth config), Tor will throw out 6 warnings
like this:
{{{
[warn] Failed to parse introduction points. Either the service has
published a corrupt descriptor or you have provided invalid authorization
data, or (maybe!) the server is deliberately serving broken data in an
attempt to crash you with bug 21018.
}}}
We should consider removing the alarmist warn about bug #21018 at some
point, and maybe that point is now, since it might freak out users for no
reason and there is no way for us to learn whether the attack took place.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25477>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list