[tor-talk] Tor 0.2.7.6 is released
o.wendel at wp.pl
Fri Dec 11 14:26:56 UTC 2015
-----BEGIN PGP SIGNED MESSAGE-----
Nick Mathewson <nickm at torproject.org>:
> Tor version 0.2.7.6 fixes a major bug in entry guard selection,
> - Actually look at the Guard flag when selecting a new directory
> guard. When we implemented the directory guard design, we
> accidentally started treating all relays as if they have the Guard
> flag during guard selection, leading to weaker anonymity and worse
> performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered
> by Mohsen Imani.
Is this bug found also in 0.2.6.10, or only in 0.2.7.5?
Are users of 0.2.6.10 (as this is still the stable version; 0.2.7.6 is
listed as unstable) encouraged to upgrade to 0.2.7.6?
What does "weaker anonymity" mean exactly? How big is the risk? Can this
bug lead to deanonymization?
Oskar Wendel, o.wendel at wp.pl.REMOVE.THIS
Pubkey at https://pgp.mit.edu/pks/lookup?search=0x6690CC52318DB84C
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
More information about the tor-talk