[tor-bugs] #31716 [Applications/Tor Browser]: Harden obfs4proxy.exe shipped with Tor Browser

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 12 09:43:39 UTC 2019


#31716: Harden obfs4proxy.exe shipped with Tor Browser
--------------------------------------+--------------------------
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-rbm, tbb-security     |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by gk):

 Closed #16417 as a duplicate for this more specific one. Yawning's
 comment, however is probably still valid:
 {{{
 Anything that's Go based won't ever have either, because the upstream Go
 maintainers place way too much faith in their compiler and runtime to
 allow for such things. I think this is shortsighted and stupid (Golang
 binaries are also statically linked so ASLR seems somewhat less useful).
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31716#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list