[Tails-dev] Control Port / Timing of the move to FF24

Nachricht löschen

Nachricht beantworten
Autor: adrelanos
Datum:  
To: tails-dev
Alte Treads: Re: [Tails-dev] Timing of the move to FF24
Betreff: [Tails-dev] Control Port / Timing of the move to FF24
Hi!

intrigeri:
> unset TOR_CONTROL_PORT and TOR_CONTROL_HOST (non-working
>      anyway, since we are forbidding access to the control port for
>      the amnesia user)


What's your rationale behind that? Probably "GETINFO address"?

Would that be worth adding to Tails design doc? Haven't seen it there.

> The fix for the "are we connected to Tor" check was a bit harder,


You might be interested in the solution I came up with for Whonix. It's
called Control Port Filter Proxy. [1] In essence, "wretch a proxy in
between Tor Browser and control port, allow a few hand selected, white
listed control port commands, discard the rest". I'd be interested in
your thoughts about that as well.

Cheers,
adrelanos

[1] https://www.whonix.org/wiki/Dev/CPFP