[tor-bugs] #7706 [Tor]: Excluded Tor nodes are still being used when their "Country" location field is "?"

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Feb 1 21:59:58 UTC 2013


#7706: Excluded Tor nodes are still being used when their "Country" location field
is "?"
--------------------------------------------------------------+-------------
 Reporter:  bugcatcher                                        |          Owner:                    
     Type:  enhancement                                       |         Status:  needs_review      
 Priority:  major                                             |      Milestone:  Tor: 0.2.4.x-final
Component:  Tor                                               |        Version:  Tor: 0.2.4.6-alpha
 Keywords:  GeoIP, relay, security, vulnerability tor-client  |         Parent:                    
   Points:                                                    |   Actualpoints:                    
--------------------------------------------------------------+-------------

Comment(by arma):

 Replying to [comment:7 andrea]:
 > I think the choice of default behavior to exclude unknowns if the user
 wants any country excluded, but include an option to change it, is
 probably the right thing.

 Sounds fine to me (mostly because I think people who exclude by country
 are generally doing a foolish thing, and so I don't much care what happens
 to them).

 We should not fool ourselves into thinking we have resolved a big security
 issue though: if an attacker wants to put his relay into a particular
 country, the geoip db's are pretty easy to game.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7706#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list