[tor-bugs] #3064 [Vidalia]: Vidalia stores ControlPassword as plaintext

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sun May 1 20:49:21 UTC 2011


#3064: Vidalia stores ControlPassword as plaintext
--------------------------+-------------------------------------------------
    Reporter:  tornewbie  |       Owner:  chiiph  
        Type:  defect     |      Status:  reopened
    Priority:  normal     |   Milestone:          
   Component:  Vidalia    |     Version:          
  Resolution:             |    Keywords:          
      Parent:             |      Points:          
Actualpoints:             |  
--------------------------+-------------------------------------------------

Comment(by tornewbie):

 When tor starts and the ControlPort is set into torrc, it warns about
 setting a password.

 Probably I am wrong but setting a random password could be a really bad
 idea just in case someone is using Vidalia to access his/her own remote
 relay : this could permit to others bad things like , for example,
 changing exit policy at runtime.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3064#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list