[tor-bugs] #1676 [Tor bundles/installation]: Pidgin leaks DNS requests when using the XMPP protocol.

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Wed Jan 26 19:19:45 UTC 2011


#1676: Pidgin leaks DNS requests when using the XMPP protocol.
--------------------------------------+-------------------------------------
 Reporter:  katmagic                  |       Owner:  erinn   
     Type:  defect                    |      Status:  assigned
 Priority:  normal                    |   Milestone:          
Component:  Tor bundles/installation  |     Version:          
 Keywords:  pidgin, DNS               |      Parent:          
--------------------------------------+-------------------------------------

Comment(by phobos):

 Replying to [comment:5 rransom]:
 > If the Pidgin developers don't fix this -- and it looks to me like they
 either don't care or don't understand that leaking DNS requests when a
 proxy is specified is a security hole -- then we have several options:
 >
 > 1. write a patch for Pidgin ourselves, and patch Pidgin in TIMBB and/or
 shove the patch upstream
 > 2. stop shipping Pidgin's XMPP plugin in TIMBB
 > 3. replace Pidgin in TIMBB with less broken IM/IRC clients
 > 4. stop shipping TIMBB and explain why on the blog

 I vote for #4.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1676#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list