Re: Heads UP! Possible Huge TOR Bug Discovered

Labiodental Fricative wrote:

> While browsing the TOR mailing list last night, the following subject caught
> my eye:
>
> http://archives.seul.org/or/talk/Aug-2006/threads.html
> Tor bug?: AllowInvalidNodes

This wasn't/isn't a bug exactly, and certainly not a huge one even
if you assume Tor developers should have addressed it precognitively.
It's at worst an amateurish attempt to gain the ability to observe
entry and exit nodes in real time. Something we all know Tor is
vulnerable to, and have for quite a while. Any real time system is
vulnerable to this, and if it were an actual attack it failed because
it was trivial to spot and defeat. The "distributed" part of the
distributed network implementation did a smashing job. :)

In any case, it's already been fixed. If you're concerned about PSINET
nodes being surreptitiously owned by the same operator the latest SVN
treats all nodes in a /16 IP block as the same family regardless of
what they report.