[tor-bugs] #28529 [Metrics/Analysis]: Confirm that Orbot geoip lookup flaw is resolved

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Nov 20 00:24:54 UTC 2018


#28529: Confirm that Orbot geoip lookup flaw is resolved
----------------------------------+--------------------------
     Reporter:  arma              |      Owner:  metrics-team
         Type:  task              |     Status:  new
     Priority:  Medium            |  Milestone:
    Component:  Metrics/Analysis  |    Version:
     Severity:  Normal            |   Keywords:
Actual Points:                    |  Parent ID:
       Points:                    |   Reviewer:
      Sponsor:                    |
----------------------------------+--------------------------
 Context part one: Georgetown and NRL et al have a paper at IMC 2018 that
 found "that ~40% of the sites accessed over Tor have a torproject.org
 domain name". At the time it was a mystery why.

 Context part two: pastly or teor or somebody in Mexico City realized that
 Orbot had a design mistake where it did an onionoo lookup (over Tor) of
 the exit relay for its circuit, rather than shipping its own geoip db.

 Context part two-b: They also discovered that around the time of that
 feature roll-out in Orbot, our onionperf graphs start to look uglier
 especially in terms of performance variance.

 Context part three: I think Nathan thinks he fixed the issue in the "Orbot
 16.0.3-BETA-2" release on Oct 12. I remember we tracked down what we
 thought was the fix to a commit that had an unrelated commit message.

 Today I saw another Orbot release mail, for "Orbot
 16.0.5-RC-1-tor-0.3.4.9".

 So: is there a graph or stats somewhere about adoption of Orbot versions,
 to get a handle on how many Orbot users have this fixed version vs how
 many don't?

 And, can we see any changes on the onionperf results as the fix got rolled
 out?

 And, once we think the fix has been rolled out to most Orbot users, could
 we do another privcount run on some exits to see if the anomaly went away?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28529>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list