Bug#349283: tor: Tor security advisory: hidden services can be located quickly

2006-01-22 Thread Steve Kemp
On Sat, Jan 21, 2006 at 07:17:36PM -0500, Chris Howie wrote: Package: tor Version: 0.1.0.16-1 Severity: grave Tags: security Justification: user security hole Tor isn't included in a Debian stable release, so no need for a DSA. Steve -- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Bug#349283: tor: Tor security advisory: hidden services can be located quickly

2006-01-21 Thread Peter Palfrader
On Sat, 21 Jan 2006, Chris Howie wrote: Package: tor Version: 0.1.0.16-1 Severity: grave Tags: security Justification: user security hole Source: http://archives.seul.org/or/announce/Jan-2006/msg1.html Basically an attacker who can run a fast Tor server can find the location of a

Bug#349283: tor: Tor security advisory: hidden services can be located quickly

2006-01-21 Thread Chris Howie
Peter Palfrader wrote: Also, Tor continues to be as fine as ever for people who don't offer hidden services, so maybe grave is a bit strong. Nonetheless it is a serious security hole for people who *do* run hidden services. I thought grave might be a bit too high, but serious is specifically