[tor-bugs] #3064 [Vidalia]: Vidalia stores ControlPassword as plaintext
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Sun May 1 21:19:47 UTC 2011
#3064: Vidalia stores ControlPassword as plaintext
--------------------------+-------------------------------------------------
Reporter: tornewbie | Owner: chiiph
Type: defect | Status: reopened
Priority: normal | Milestone:
Component: Vidalia | Version:
Resolution: | Keywords:
Parent: | Points:
Actualpoints: |
--------------------------+-------------------------------------------------
Comment(by chiiph):
Replying to [comment:7 tornewbie]:
> When tor starts and the ControlPort is set into torrc, it warns about
setting a password.
>
> Probably I am wrong but setting a random password could be a really bad
idea just in case someone is using Vidalia to access his/her own remote
relay : this could permit to others bad things like , for example,
changing exit policy at runtime.
>
If you are using Vidalia to access a remote relay, then you shouldn't use
a random password, since next time you'll try to access you won't be able
to.
But other than that, I fail to see how setting a random password would
make it change the exit policy.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3064#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list