[tor-bugs] #28332 [Core Tor/Nyx]: Nyx configurashion editor reproducibly crashes if custom ordering is set

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Nov 5 19:39:55 UTC 2018


#28332: Nyx configurashion editor reproducibly crashes if custom ordering is set
--------------------------+------------------------------
 Reporter:  wagon         |          Owner:  atagar
     Type:  defect        |         Status:  closed
 Priority:  Medium        |      Milestone:
Component:  Core Tor/Nyx  |        Version:  Tor: 0.3.4.9
 Severity:  Normal        |     Resolution:  duplicate
 Keywords:  config        |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------

Comment (by wagon):

 > simply run `git clone ​https://git.torproject.org/nyx.git`
 So, I can install on my system any trojan, run it, and later verify that
 this trojan was OK? No, it doesn't work this way. Once you installed it in
 `/usr`, and once it touched some important files, your system cannot be
 trusted again.

 Well, I can clone it to in some virtual machine and (suppose) verify it by
 the last commit. Then, what's the next? I need to move this trusted tree
 to my main system, where old `nyx` was installed using `pip3`. As I
 understand, git nyx version is not a python package, so it is not that
 simple. Either I have to learn how to install it to some local directory
 in parallel to main installation, or figure out how to replace all files
 of existing installation manually.

 And all of that just because you cannot give a link to current version
 with singed tarball. I spent few days to commit my tickets, I'm not payed
 for it, and I am not eager to learn `git` and `pip3` internals now only to
 commit a couple of more tickets. I'm sorry.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28332#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list