[tor-bugs] #30599 [Core Tor/Tor]: Cloudflare alt-svc onions cause a different exit to be used at each request

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri May 24 07:00:33 UTC 2019


#30599: Cloudflare alt-svc onions cause a different exit to be used at each request
--------------------------+------------------------------
 Reporter:  cypherpunks2  |          Owner:  (none)
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Component:  Core Tor/Tor
  Version:                |       Severity:  Normal
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------
 For some websites, such as zerobin.net which use Cloudflare's new onions,
 each request might cause a different exit to be used. This is bad both
 from a load perspective as well as a fingerprinting perspective.

 Steps to reproduce: Go to zerobin.net and create a new paste with "allow
 discussion" enabled. Post several comments and observe that the visual
 hash of the IP often changes with each comment. Check the circuit display
 to verify.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30599>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list