[tor-bugs] #23512 [Core Tor/Tor]: Bandwidth stats info leak upon close of circuits with queued cells

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Oct 11 17:59:47 UTC 2018


#23512: Bandwidth stats info leak upon close of circuits with queued cells
-------------------------------------------------+-------------------------
 Reporter:  asn                                  |          Owner:  (none)
     Type:  defect                               |         Status:
                                                 |  merge_ready
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.3.4.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tor-bug-bounty, congestion-attack,   |  Actual Points:
  research, watermark, tor-stats, guard-         |
  discovery-stats, 034-triage-20180328,          |
  034-removed-20180328                           |
Parent ID:                                       |         Points:
 Reviewer:  dgoulet                              |        Sponsor:
                                                 |  SponsorQ
-------------------------------------------------+-------------------------

Comment (by mikeperry):

 Dhalgren - What produced that graph, and for what Tor relay version? That
 does not look like a metrics graph.

 Exits can have asymmetry between bytes read and bytes written due to cell
 packing. If there is a lot of intermittent small-packet activity (eg SSH)
 being read from a public internet IP by your exit, your exit will package
 will package those small packets into their own cells, and end up writing
 much more than it has been reading as it sends those mostly empty cells to
 the middle node. So this could be unrelated.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23512#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list