[tor-talk] Tor 0.2.7.6 is released
Oskar Wendel
o.wendel at wp.pl
Fri Dec 11 14:26:56 UTC 2015
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Nick Mathewson <nickm at torproject.org>:
> Tor version 0.2.7.6 fixes a major bug in entry guard selection,
> - Actually look at the Guard flag when selecting a new directory
> guard. When we implemented the directory guard design, we
> accidentally started treating all relays as if they have the Guard
> flag during guard selection, leading to weaker anonymity and worse
> performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered
> by Mohsen Imani.
Is this bug found also in 0.2.6.10, or only in 0.2.7.5?
Are users of 0.2.6.10 (as this is still the stable version; 0.2.7.6 is
listed as unstable) encouraged to upgrade to 0.2.7.6?
What does "weaker anonymity" mean exactly? How big is the risk? Can this
bug lead to deanonymization?
Thank you.
- --
Oskar Wendel, o.wendel at wp.pl.REMOVE.THIS
Pubkey at https://pgp.mit.edu/pks/lookup?search=0x6690CC52318DB84C
-----BEGIN PGP SIGNATURE-----
iQEcBAEBAgAGBQJWat0oAAoJEGaQzFIxjbhMYnsIAJkVa8YhXD5jWduhaEMh433L
wh1suAJPTWiqFTMgRz5E9jsa+NXbOM8EqirAc3FjvNMVp4DEM9CLAEyeDDTxBBaq
d3WCc17fSkfswIDx31lHmDW88ruOKjx+ldkc6aI23980uYGxBPJvdmXizxu7qTi5
eDcVCDAARj6nC2siEEFhrufUu7JpebpXsl/lufa9J40T2t33eCuLHGQ8U8xFqKrN
R4+o128QSZGVsJJ/ayklXd419LYVXNeV8m/r4s4JLwWA9835JgBhjEVxySSZiYeO
Prb/6PqSDckLpuuUduFC3gbqjRKHBDcxI6HyDPctN9pY4CkoUx3w4RaBl3nF9b4=
=eXdI
-----END PGP SIGNATURE-----
More information about the tor-talk
mailing list