------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
         
http://bugs.kde.org/show_bug.cgi?id=122898         
           Summary: Kopete doesn't use the KDE-configured Socks Proxy to
                    resolve DNS queries
           Product: kopete
           Version: 0.11.1
          Platform: Compiled Sources
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
        AssignedTo: kopete-devel kde org
        ReportedBy: junkie go-a-way dyndns org


Version:           0.11.1 (using KDE Devel)
Installed from:    Compiled sources
Compiler:          GCC 4.0.2 (thread model: posix, host: i686-pc-linux-gnu) 
OS:                Linux

Hello,

I've chose Tor (http://tor.eff.org) as the gateway to some of my Internet uses 
: Web-browsing & IM.

so I did install Dante (a Socks-client), Configured Dante, and then configured 
KDE to use Dante as a Socks-client.
This Configuration works well (tested using Konqueror & Kopete).

Anyway, The issue was discovered when I wanted Tor to also resolve the DNS 
queries on my behalf - for better privacy.

Tor, has a feature (and a matching config-setting) that logs whatever if It got 
a target IP-address (bad for privacy) - or a Hostname (good for privacy), this 
Tor config-setting is named "TestSocks".

After enabling this feature in Tor, I found that Kopete, in contrary to 
Konqueror and Mozilla-Firefox, gives the Socks Proxy an IP-address (bad for 
privacy) - instead of an Hostname (good for privacy).

I did my Kopete testing while connecting to the ICQ & MSN Networks.

When a program (like : Kopete-0.11.1) gives the Tor Socks-Proxy a an IP-address 
instead of a Hostname, the log-message looks like this :
---
Mar 01 17:00:52.364 [warn] fetch_from_buf_socks(): Your application (using 
socks5 on port 5190) is giving Tor only an IP address. Applications that do DNS 
resolves themselves may leak information. Consider using Socks4A (e.g. via 
privoxy or socat) instead.  For more information, please see 
http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#SOCKSAndDNS";
---

and When a program (like : Konqueror-3.5.1 and Mozilla-Firefox-1.5) gives the 
Tor Socks-Proxy a Hostname instead of an IP-address, the log-message looks like 
this :
---
Mar 01 17:07:55.474 [notice] fetch_from_buf_socks(): Your application (using 
socks4a on port 80) gave Tor a hostname, which means Tor will do the DNS 
resolve for you. This is good.
---

This issue might put some of the ones who need protection from their "big 
brother" (in non-democratic countries, in corrupted corporations & etc.), at 
great danger.

If there's anything I can do to assist on solving this issue, Please do contact 
me, and I'll do what I can.

Thankyou, for your greatly estimated work on Kopete :)

Moran Z.
_______________________________________________
kopete-devel mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/kopete-devel

Reply via email to