[tor-bugs] #1082 [Polipo]: Information leaks

[Tor Bug Tracker & Wiki]

#1082: Information leaks
----------------------+-----------------------------------------------------
  Reporter:  loafier  |       Owner:  loafier
      Type:  defect   |      Status:  closed 
  Priority:  minor    |   Milestone:         
 Component:  Polipo   |     Version:  1.0    
Resolution:  wontfix  |    Keywords:         
    Parent:           |  
----------------------+-----------------------------------------------------
Changes (by phobos):

  * status:  new => closed
  * resolution:  None => wontfix


Old description:

> Polipo adds the hostname, listening port, and local time in the footer
> of error messages. An adversary might be able to gather this information
> in a script and use it to narrow down the identity of the user.
>
> http://pseudo-flaw.net/content/defcon/dc-17-demos/
>
> There may be other areas where Polipo leaks information.
>
> [Automatically added by flyspray2trac: Operating System: All]

New description:

 Polipo adds the hostname, listening port, and local time in the footer
 of error messages. An adversary might be able to gather this information
 in a script and use it to narrow down the identity of the user.

 http://pseudo-flaw.net/content/defcon/dc-17-demos/

 There may be other areas where Polipo leaks information.

 [Automatically added by flyspray2trac: Operating System: All]

--

Comment:

 Juliusz has taken over polipo maintenance again.  He's asked the authors
 of existing bugs to email them to his mailing list at
 https://lists.sourceforge.net/lists/listinfo/polipo-users

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1082#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online