[tor-bugs] #11728 [TorBirdy]: Torbirdy shouldn't allow clearnet connections on startup if started in Transparent Torification mode

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun May 4 18:49:51 UTC 2014


#11728: Torbirdy shouldn't allow clearnet connections on startup if started in
Transparent Torification mode
----------------------------+-------------------------
 Reporter:  mttp            |          Owner:  ioerror
     Type:  defect          |         Status:  new
 Priority:  major           |      Milestone:
Component:  TorBirdy        |        Version:
 Keywords:  identity-leaks  |  Actual Points:
Parent ID:                  |         Points:
----------------------------+-------------------------
 Here's the situation: Alice uses Torbirdy in "Transparent Torification"
 mode to check her email on her laptop with her Tor router at home. She
 later takes her laptop to an internet cafe and checks her email there. As
 soon as she opens Thunderbird, a connection is made in the clear to her
 email provider before she has a chance to change Torbirdy's settings to
 "Use Tor Onion Router". This is an identity leak, and Torbirdy should
 prevent this possibility.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11728>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list