[tor-bugs] #16846 [Tor]: Include sizeof(void *) in your extrainfo.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Oct 1 12:39:20 UTC 2015
#16846: Include sizeof(void *) in your extrainfo.
-------------------------+-------------------------------------------------
Reporter: yawning | Owner:
Type: | Status: new
enhancement | Milestone: Tor: 0.2.8.x-final
Priority: normal | Version: Tor: unspecified
Component: Tor | Keywords: tor-core, extrainfo, metrics,
Resolution: | lorax, 028-triage
Actual Points: | Parent ID:
Points: | Sponsor:
-------------------------+-------------------------------------------------
Comment (by mikeperry):
FWIW, this seems OK to gather in aggregate, but I am a bit nervous about
exposing specific platform details in individual extra-info since that
will aid in targeted attacks. For example, ASLR is significantly weaker on
32 bit systems. Similarly, the attacker will know that things like ASAN
could not have been used to build the Tor binary on a 32 bit system (and
so has much less risk of an 0day being captured by a 32 bit relay
operator).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16846#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list