On Sun, Dec 21, 2014 at 06:31:33PM +0000, Federico Ceratto wrote: > Package: popularity-contest > Version: 1.61 > Severity: wishlist > > Hi, > > Attached is a small patch to enable popcon submissions over Tor. > It might help https://trac.torproject.org/projects/tor/ticket/13154 > Even with GnuPG encryption, regular HTTP submissions leaks the presence > of a Debian[-derivative] OS and this could also be used to enumerate > Debian hosts in a network; Also, popcon-upload could be forced to fall-back to > SMTP and leak more information in the headers. > > The patch relies on exit nodes to connect to the HTTP service and prevents > SMTP fallback. If a popcon hidden service was to be set up in future, it could > be used with: > SUBMITURLS="http://HIDDEN_SERVICE_NAME/cgi-bin/popcon.cgi"
Hello Federico, For some reason, your patch is empty: all I have is commit 58af819641e879260b180558cac56cfd3f5d7333 Author: Federico Ceratto <federico.cera...@gmail.com> Date: Sun Dec 21 16:49:16 2014 +0000 Add Tor support :100644 100644 2bf1d82... dbe674a... M debian/control :100644 100644 c45bccb... f3feaa7... M debian/cron.daily :100644 100644 433bc14... 718aa99... M default.conf Cheers, -- Bill. <ballo...@debian.org> Imagine a large red swirl here. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org