[tor-bugs] #31936 [Circumvention/BridgeDB]: Write usage metrics to disk before terminating

[Tor Bug Tracker & Wiki]

#31936: Write usage metrics to disk before terminating
------------------------------------+--------------------------------
 Reporter:  phw                     |          Owner:  (none)
     Type:  defect                  |         Status:  closed
 Priority:  Medium                  |      Milestone:
Component:  Circumvention/BridgeDB  |        Version:
 Severity:  Normal                  |     Resolution:  wontfix
 Keywords:  s30-o21a1               |  Actual Points:  0
Parent ID:  #31274                  |         Points:  1
 Reviewer:                          |        Sponsor:  Sponsor30-must
------------------------------------+--------------------------------
Changes (by phw):

 * status:  new => closed
 * resolution:   => wontfix
 * actualpoints:   => 0


Comment:

 Over at #31780,
 [https://trac.torproject.org/projects/tor/ticket/31780#comment:11 karsten
 pointed out] that relays have the same issue and that's fine because
 writing unsanitised metrics to disk can be a security issue.

 In the context of BridgeDB, this could be an issue if the service
 restarts, say, five minutes after it began a new measurement interval.
 Whoever used BridgeDB in these five minutes has a very small anonymity set
 to hide in. I think we're better off leaving the code as it is, so each
 measurement interval is guaranteed to cover 24 hours. Instead, we should
 minimise the number of times we have to restart BridgeDB.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31936#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online