网络安全软件，Tor 0.2.5.12/0.2.6.7 发布

jopen 9年前

Tor 是一个帮助你抵御流量分析的软件项目， 流量分析是一种对网络的监视行为。Tor 将你的通信通过一个由遍及全球的志愿者运行的中继（relay）所组成的分布式网络转发， 以此来保护你的安全：它令监视你的 Internet 连接的那些人无法知道你所访问的站点， 它还令你所访问的站点无法知道你的物理位置。Tor 能与现有的许多应用程序配合工作， 包括 Web 浏览器、即时通讯客户端、远程登录和基于 TCP 协议的其他应用程序。

网络安全软件，Tor 0.2.5.12/0.2.6.7 发布

Tor 0.2.5.12 版本与 0.2.6.7 版本同时发布，Tor 0.2.5.12 主要修改如下：

  • Major bugfixes (security, hidden service):

    • Fix an issue that would allow a malicious client to trigger an assertion failure and halt a hidden service. Fixes bug 15600; bugfix on 0.2.1.6-alpha. Reported by "disgleirio".

    • Fix a bug that could cause a client to crash with an assertion failure when parsing a malformed hidden service descriptor. Fixes bug 15601; bugfix on 0.2.1.5-alpha. Found by "DonnchaC".

  • Minor features (DoS-resistance, hidden service):

    • Introduction points no longer allow multiple INTRODUCE1 cells to arrive on the same circuit. This should make it more expensive for attackers to overwhelm hidden services with introductions. Resolves ticket 15515.

    </ul>

    Tor 0.2.6.7 版本主要更新信息如下：

    • Major bugfixes (security, hidden service):

      • Fix an issue that would allow a malicious client to trigger an assertion failure and halt a hidden service. Fixes bug 15600; bugfix on 0.2.1.6-alpha. Reported by "disgleirio".

      • Fix a bug that could cause a client to crash with an assertion failure when parsing a malformed hidden service descriptor. Fixes bug 15601; bugfix on 0.2.1.5-alpha. Found by "DonnchaC".

    • Minor features (DoS-resistance, hidden service):

      • Introduction points no longer allow multiple INTRODUCE1 cells to arrive on the same circuit. This should make it more expensive for attackers to overwhelm hidden services with introductions. Resolves ticket 15515.

      • Decrease the amount of reattempts that a hidden service performs when its rendezvous circuits fail. This reduces the computational cost for running a hidden service under heavy load. Resolves ticket 11447.

      </ul>

      详细信息请查看发行页面。

      其源代码现已提供下载：

      https://dist.torproject.org/

      来自：http://www.oschina.net/news/61302/tor-0-2-5-12-0-2-6-7-released