[tor-bugs] #13667 [Tor]: Prevent port scanning of hidden services

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Dec 23 17:14:56 UTC 2014


#13667: Prevent port scanning of hidden services
------------------------+------------------------------------------
     Reporter:  arma    |      Owner:
         Type:  defect  |     Status:  needs_review
     Priority:  major   |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  SponsorR tor-hs 025-backport
Actual Points:          |  Parent ID:
       Points:          |
------------------------+------------------------------------------

Comment (by nickm):

 Under this patch, won't it be the case that an attacker can still easily
 tell exit-policy failures from a missing application, since exit policy
 failures will make us close the circuit, but missing applications won't?

 If that's the case, I don't know what the reason is for sending
 END_STREAM_REASON_DONE, if we're going to close too.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13667#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list