[tor-bugs] #6297 [Tor Client]: SOCKS issues with bitcoin in .2.3.18-rc vs .2.2.37

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Wed Jul 18 13:53:59 UTC 2012


#6297: SOCKS issues with bitcoin in .2.3.18-rc vs .2.2.37
-------------------------+--------------------------------------------------
 Reporter:  jrmithdobbs  |          Owner:                   
     Type:  defect       |         Status:  needs_information
 Priority:  normal       |      Milestone:                   
Component:  Tor Client   |        Version:  Tor: 0.2.3.18-rc 
 Keywords:               |         Parent:                   
   Points:               |   Actualpoints:                   
-------------------------+--------------------------------------------------

Comment(by jrmithdobbs):

 That's true. Hadn't considered that.

 With that in mind maybe there should just be a very big warning in the man
 page/related documentation about the risks of binding the SocksPort to
 something external clients have access to. (Maybe with a mention of
 SocksPolicy + *authenticated* ipsec transport connections or similar as a
 workaround?)

 This isn't really a preventable scenario so long as it's non-loopback and
 there's any chance at all of a malicious user on the network.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6297#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list