[tor-bugs] #12147 [BridgeDB]: BridgeDB distributors do not handle time intervals correctly (was: BridgeDB bridge requests over HTTPS have another timeout issue)

Tue Jul 15 16:45:15 UTC 2014

#12147: BridgeDB distributors do not handle time intervals correctly
-------------------------+-------------------------------------------------
     Reporter:  isis     |      Owner:  isis
         Type:  defect   |     Status:  reopened
     Priority:           |  Milestone:
  critical               |    Version:
    Component:           |   Keywords:  bridgedb-0.2.2, security, bridgedb-
  BridgeDB               |  https
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by cypherpunks):

 Providing some clarification, this affects the email distributor as much
 as it affects the http distributor (though the overall impact on the
 captcha system is worse). The email distributor also calls
 [https://gitweb.torproject.org/bridgedb.git/blob/HEAD:/lib/bridgedb/email/autoresponder.py#l77
 getInterval()]. This should also be patched.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12147#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online