[tor-bugs] #2837 [Torbutton]: Torbutton's ‘banned ports’ make it detectable when off

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sun Apr 3 07:42:22 UTC 2011


#2837: Torbutton's ‘banned ports’ make it detectable when off
-----------------------+----------------------------------------------------
 Reporter:  rransom    |          Owner:  mikeperry
     Type:  defect     |         Status:  new      
 Priority:  normal     |      Milestone:           
Component:  Torbutton  |        Version:           
 Keywords:             |         Parent:           
   Points:             |   Actualpoints:           
-----------------------+----------------------------------------------------
 Torbutton leaves ports 8118, 8123, 9050, and 9051 in Firefox's ‘banned
 ports’ list when it is disabled.  A web server can use this fact to detect
 Torbutton's presence, even in non-Tor mode, by telling a user's browser to
 connect to it on multiple ports, including those ‘banned’ by Torbutton.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2837>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list