[tor-talk] Any risks with another application using Tor's SOCKS 5 interface?

[Roman Mamedov]

On Wed, 4 Dec 2013 10:57:36 -0800
James Marshall <james at jmarshall.com> wrote:

> SOCKS 5 is insecure if the client and server are on different hosts and

What exactly that insecurity consists of?

If your aim is to open an client-less "in-proxy" to Tor network for anyone to
use, then you might just as well open your SOCKS 5 port to the world.

AFAIK any insecurity in SOCKS is related only to authentication, i.e.
unauthorized users may be able to connect to your SOCKS proxy. But that's not
an issue if you open it to anyone "by design" anyway.

-- 
With respect,
Roman
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20131205/b84b84d6/attachment.sig>