[tor-bugs] #19997 [Obfuscation/BridgeDB]: BridgeDB's get-tor-exits script doesn't account for IPv6

[Tor Bug Tracker & Wiki]

#19997: BridgeDB's get-tor-exits script doesn't account for IPv6
--+
 Reporter:  isis  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Major |   Keywords:  bridge-enumeration
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 As Arlo pointed out [https://lists.torproject.org/pipermail/tor-
 dev/2016-August/011318.html on the tor-dev mailing list], the `exit-
 addresses` script running on check.torproject.org doesn't include IPv6
 exit addresses, making anything that relies upon the list unreliable.
 BridgeDB's `scripts/get-tor-exits` downloads the output of `exit-
 addresses`, and uses it to treat clients using Tor to request bridges as
 coming from the same address. Not taking IPv6 addresses into account will
 allow an adversary to use IPv6-capable tor exits to get additional bridges
 during a time period.

 Some new script should be written to generate a list of IPv6 (optionally
 also IPv4 addresses, so that everything is in one document) exit addresses
 to fix this issue.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19997 [Obfuscation/BridgeDB]: BridgeDB's get-tor-exits script doesn't account for IPv6

[Tor Bug Tracker & Wiki]

#19997: BridgeDB's get-tor-exits script doesn't account for IPv6
--+---
 Reporter:  isis  |  Owner:  (none)
 Type:  defect| Status:  assigned
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Major | Resolution:
 Keywords:  bridge-enumeration|  Actual Points:
Parent ID:| Points:  2
 Reviewer:|Sponsor:  Sponsor19
--+---
Changes (by gaba):

 * owner:  isis => (none)
 * status:  new => assigned
 * points:   => 2
 * sponsor:   => Sponsor19


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs