[tor-bugs] #27822 [Applications/Tor Browser]: TBA is leaking DNS

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Sep 25 02:15:36 UTC 2018


#27822: TBA is leaking DNS
-----------------------------------------+--------------------------
 Reporter:  cypherpunks3                 |          Owner:  tbb-team
     Type:  defect                       |         Status:  new
 Priority:  Medium                       |      Milestone:
Component:  Applications/Tor Browser     |        Version:
 Severity:  Normal                       |     Resolution:
 Keywords:  tbb-mobile tbb-proxy-bypass  |  Actual Points:
Parent ID:  #21863                       |         Points:
 Reviewer:                               |        Sponsor:
-----------------------------------------+--------------------------

Comment (by cypherpunks3):

 Steps to reproduce this bug:
 1. Record DNS requests
 2. Open some websites in TBA

 I opened a few websites in TBA and recorded the DNS replies using tcpdump.
 I opened ebay.com, craigslist.org, netflix.com, bing.com, twitter.com,
 pinterest.com, torproject.org, 3g2upl4pq6kufc4m.onion (duckduckgo onion
 address)

 Here are the logs
 `q: A? ir.ebaystatic.com. 1/0/0 ir.ebaystatic.com. [5m] A 92.123.82.129
 (51)`
 `q: A? copenhagen.craigslist.dk. 1/0/0 copenhagen.craigslist.dk. [1h] A
 208.82.237.2 (58)`
 `q: A? assets.nflxext.com. 1/0/0 assets.nflxext.com. [5m] A 2.18.232.136
 (52)`
 `q: A? www.bing.com. 1/0/0 www.bing.com. [5m] A 13.107.21.200 (46)`
 `q: A? abs.twimg.com. 1/0/0 abs.twimg.com. [5m] A 104.244.46.199 (47)`
 `q: A? s.pinimg.com. 1/0/0 s.pinimg.com. [5m] A 23.35.115.223 (46)`
 `q: A? www.torproject.org. 1/0/0 www.torproject.org. [5m] A 138.201.14.197
 (52)`
 `q: A? 3g2upl4pq6kufc4m.onion. 1/0/0 3g2upl4pq6kufc4m.onion. [1m] A
 10.255.165.235 (56)`

 These replies only appear if DNS is leaking.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27822#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list