[tor-bugs] #2722 [Tor Hidden Services]: TunnelDirConns option affects hid_serv_get_responsible_directories

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sat Mar 12 15:28:16 UTC 2011


#2722: TunnelDirConns option affects hid_serv_get_responsible_directories
---------------------------------+------------------------------------------
 Reporter:  rransom              |          Owner:  rransom            
     Type:  defect               |         Status:  new                
 Priority:  blocker              |      Milestone:  Tor: 0.2.1.x-final 
Component:  Tor Hidden Services  |        Version:  Tor: 0.2.2.23-alpha
 Keywords:                       |         Parent:                     
   Points:                       |   Actualpoints:                     
---------------------------------+------------------------------------------
Changes (by rransom):

  * priority:  normal => blocker
  * milestone:  => Tor: 0.2.1.x-final


Comment:

 The fix for this is to revert
 [https://gitweb.torproject.org/tor.git/commitdiff/9a7098487b2c25f36112b3521758f42621dcd6af
 commit 9a7098487b2c25f36112b3521758f42621dcd6af] (first released in
 0.2.1.6-alpha).  That earlier commit claimed to be a 'bugfix'; if it
 really was, then Tor clients were connecting directly to HSDir nodes to
 upload and fetch hidden service descriptors, which is a '''major'''
 information leak.

 Raising priority to 'blocker' until we know how serious this problem is.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2722#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list