[tor-bugs] #8716 [Tor]: HashedControlPassword Doesn't Seem To Do Anything

[Tor Bug Tracker & Wiki]

#8716: HashedControlPassword Doesn't Seem To Do Anything
-----------------------------------+----------------------------------------
 Reporter:  cypherpunks            |          Owner:                     
     Type:  defect                 |         Status:  needs_information  
 Priority:  normal                 |      Milestone:  Tor: 0.2.4.x-final 
Component:  Tor                    |        Version:  Tor: 0.2.4.11-alpha
 Keywords:  tor-client controller  |         Parent:                     
   Points:                         |   Actualpoints:                     
-----------------------------------+----------------------------------------

Comment(by cypherpunks):

 Replying to [comment:1 nickm]:
 > I just tried myself, not using arm, only using telnet.  I gave the
 password on the command line, and started Tor with an empty torrc.  The
 command-line I used was:
 > {{{
 > ./src/or/tor -controlport 9999 -hashedcontrolpassword
 16:6C5A0892C58419E160285695991BEDD067449F845E14735A6FBAB0829B
 > }}}
 >
 > (The password there is "foo".)
 >
 > When I connect with telnet and say 'AUTHENTICATE "foo" ', it succeeds,
 but if I give a different password, it fails.
 >
 > My first guess here would be that the torrc you're editing isn't the one
 that your Tor is using, or that something else is overriding your Tor's
 configuration settings.

 I can confirm that telneting in and using AUTHENTICATE works as expected
 (sorry, I didn't know how to check this myself before).

 Sorry for the false alarm.

 Even after changing my password, and checking it with telnet, I can still
 connect with arm even though it never asks me for a password. Does this
 mean arm is setting up it's own control port and password?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8716#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online