Re: [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- From: jf <jf@xxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 9 Dec 2007 09:29:41 +0000 (UTC)
there is no "if", anyone can join the network and contribute,
including exit traffic. a proper _implementation_ and _use_ of Tor
will protect against the leakage you describe. improved scanning of
the Tor network and rapid flagging of "bad exit"s at the directories
is a work in progress and can definitely be improved upon.
lemme know if you need ointment with that band-aid.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Follow-Ups:
- References:
- [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- From: gmaggro
- Re: [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- From: Peter Besenbruch
- Re: [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- From: gmaggro
- Re: [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- From: jf
- Re: [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- From: coderman
- [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- Prev by Date: Re: [Full-disclosure] Google / GMail bug, all accounts vulnerable It's just stopped working for me.
- Next by Date: Re: [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- Previous by thread: Re: [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- Next by thread: Re: [Full-disclosure] Compromise of Tor, anonymizing networks/utilities
- Index(es):
Relevant Pages
|