[tor-bugs] #7706 [Tor]: Excluded Tor nodes are still being used when their "Country" location field is "?"

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Feb 1 22:25:04 UTC 2013


#7706: Excluded Tor nodes are still being used when their "Country" location field
is "?"
----------------------------+-----------------------------------------------
    Reporter:  bugcatcher   |       Owner:                                                  
        Type:  enhancement  |      Status:  closed                                          
    Priority:  major        |   Milestone:  Tor: 0.2.4.x-final                              
   Component:  Tor          |     Version:  Tor: 0.2.4.6-alpha                              
  Resolution:  implemented  |    Keywords:  GeoIP, relay, security, vulnerability tor-client
      Parent:               |      Points:                                                  
Actualpoints:               |  
----------------------------+-----------------------------------------------
Changes (by nickm):

  * status:  needs_review => closed
  * resolution:  => implemented


Comment:

 Replying to [comment:10 arma]:
 > Replying to [comment:7 andrea]:
 > > I think the choice of default behavior to exclude unknowns if the user
 wants any country excluded, but include an option to change it, is
 probably the right thing.
 >
 > Sounds fine to me (mostly because I think people who exclude by country
 are generally doing a foolish thing, and so I don't much care what happens
 to them).

 Merged into master; thanks for having a look!

 > We should not fool ourselves into thinking we have resolved a big
 security issue though: if an attacker wants to put his relay into a
 particular country, the geoip db's are pretty easy to game.

 I concur; this is more a UI matter and a least-surprise matter than a
 security fix.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7706#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list