[tor-bugs] #6545 [Tor Client]: Isolation level may be funky and share circuits?
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Thu Aug 16 04:47:02 UTC 2012
#6545: Isolation level may be funky and share circuits?
---------------------------------+------------------------------------------
Reporter: sdjfjsdfiuhszduh | Owner:
Type: defect | Status: closed
Priority: normal | Milestone: Tor: 0.2.3.x-final
Component: Tor Client | Version:
Resolution: invalid | Keywords:
Parent: | Points:
Actualpoints: |
---------------------------------+------------------------------------------
Comment(by sdjfjsdfiuhszduh):
Replying to [comment:13 rransom]:
> Replying to [comment:11 sdjfjsdfiuhszduh]:
> > .NET (which is ridiculously easy to use and lets me hack up code as
fast as python) doesn't support SOCKs directly (Both HttpWebRequest and
the higher level WebClient).
>
> Is the source code for these
modules/components/classes/objects/whatevers available? Have you audited
them to check for DNS-query leaks and other anonymity risks?
>
> What you do with your own computer and its configuration is really none
of our business (except to the extent that we need to know about it in
order to understand/verify/resolve a bug report), but you seem to be the
same person that wrote an ‘encrypted PM’ application which uses Tor, and
DNS leaks (or other anonymity flaws) in that application could put other
people at risk, too.
I did write that and this had nothing to do with that. Except just
learning more about tor and playing around. I'm very unsure how to check
DNS leaks. For the app i written I actually didn't consider blocking out
onion URLs if there are no proxies being used. I actually just use a TCP
socket, use dns to connect to the address UNLESS there is a proxy in which
case I plug the domain through the proxy. So you're only at risk if you
forget to configure the socks proxy and use a secretive url.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6545#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list