[tor-bugs] #1676 [Tor bundles/installation]: Pidgin leaks DNS requests when using the XMPP protocol.

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sat Jan 15 10:54:31 UTC 2011


#1676: Pidgin leaks DNS requests when using the XMPP protocol.
--------------------------------------+-------------------------------------
 Reporter:  katmagic                  |       Owner:  erinn   
     Type:  defect                    |      Status:  assigned
 Priority:  normal                    |   Milestone:          
Component:  Tor bundles/installation  |     Version:          
 Keywords:  pidgin, DNS               |      Parent:          
--------------------------------------+-------------------------------------
Changes (by rransom):

  * owner:  helix => erinn


Comment:

 If the Pidgin developers don't fix this -- and it looks to me like they
 either don't care or don't understand that leaking DNS requests when a
 proxy is specified is a security hole -- then we have several options:

 1. write a patch for Pidgin ourselves, and patch Pidgin in TIMBB and/or
 shove the patch upstream
 2. stop shipping Pidgin's XMPP plugin in TIMBB
 3. replace Pidgin in TIMBB with less broken IM/IRC clients
 4. stop shipping TIMBB and explain why on the blog

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1676#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list