#18156: Add a torrc flag to disable ADD_ONION creation.
-----------------------------+------------------------------
Reporter: cypherpunks | Owner:
Type: defect | Status: closed
Priority: Medium | Milestone: Tor: 0.2.???
Component: Tor | Version:
Severity: Normal | Resolution: wontfix
Keywords: tor-hs, control | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor: SponsorR-can
-----------------------------+------------------------------
Changes (by dgoulet):
* status: new => closed
* resolution: => wontfix
Comment:
After discussion on #tor-dev, with an open control port, if an attacker is
able to give it command, you are doomed by design.
The correct but very difficult way to fix this would be to have a control
command filter that is a subset of commands that could be consider "safe"
which is a `HARD` problem to solve because it depends heavily on the
thread model of the user/app. See ticket #8369 about this.
Closing this one as wontfix.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18156#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
