[tor-dev] CPAProxy - a thin Objective-C wrapper around Tor

[Lunar]

Claudiu-Vlad Ursache:
> - CPAProxy sets up Tor's DataDir in a temporary directory of an app's
> sandbox where it's not accessible by other processes. Should that directory
> be protected in any other way?

Having DataDir temporary means that the client will pick new guards
everytime it starts. This opens the door to more traffic correlation
attacks. See the relevant FAQ for more details about entry
guards: <https://www.torproject.org/docs/faq.html.en#EntryGuards>

-- 
Lunar                                             <lunar at torproject.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20131008/dab07cc6/attachment.sig>