[tor-bugs] #26294 [Core Tor/Tor]: attacker can force intro point rotation by ddos
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Sep 13 08:50:18 UTC 2019
#26294: attacker can force intro point rotation by ddos
-------------------------------------------------+-------------------------
Reporter: arma | Owner: asn
Type: defect | Status:
| merge_ready
Priority: Medium | Milestone: Tor:
| 0.4.2.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Resolution:
Keywords: tor-hs, tor-dos, network-team- | Actual Points: 6
roadmap-august, security, 042-should |
Parent ID: #29999 | Points: 7
Reviewer: dgoulet | Sponsor:
| Sponsor27-must
-------------------------------------------------+-------------------------
Comment (by zmer):
INTRO cells used to have a timestamp that could be used to discard old
ones being replayed. All things considered, the reasons given for removing
it didn't make good sense. Arguably it should be brought back. And perhaps
in future clients could be made to keep their own accurate time,
independent of what the host clock is set to. There would be a number of
benefits. But that is another ticket.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26294#comment:37>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list