網絡安全軟件，Tor 0.2.5.12/0.2.6.7 發布

jopen 9年前發布 | 5K 次閱讀 Tor

Tor 是一個幫助你抵御流量分析的軟件項目， 流量分析是一種對網絡的監視行為。Tor 將你的通信通過一個由遍及全球的志愿者運行的中繼（relay）所組成的分布式網絡轉發， 以此來保護你的安全：它令監視你的 Internet 連接的那些人無法知道你所訪問的站點， 它還令你所訪問的站點無法知道你的物理位置。Tor 能與現有的許多應用程序配合工作， 包括 Web 瀏覽器、即時通訊客戶端、遠程登錄和基于 TCP 協議的其他應用程序。

網絡安全軟件，Tor 0.2.5.12/0.2.6.7 發布

Tor 0.2.5.12 版本與 0.2.6.7 版本同時發布，Tor 0.2.5.12 主要修改如下：

  • Major bugfixes (security, hidden service):

    </li>

    • Fix an issue that would allow a malicious client to trigger an assertion failure and halt a hidden service. Fixes bug 15600; bugfix on 0.2.1.6-alpha. Reported by "disgleirio".

      </li>

    • Fix a bug that could cause a client to crash with an assertion failure when parsing a malformed hidden service descriptor. Fixes bug 15601; bugfix on 0.2.1.5-alpha. Found by "DonnchaC".

      </li> </ul>

    • Minor features (DoS-resistance, hidden service):

      </li>

      • Introduction points no longer allow multiple INTRODUCE1 cells to arrive on the same circuit. This should make it more expensive for attackers to overwhelm hidden services with introductions. Resolves ticket 15515.

        </li> </ul> </ul>

        Tor 0.2.6.7 版本主要更新信息如下：

        • Major bugfixes (security, hidden service):

          </li>

          • Fix an issue that would allow a malicious client to trigger an assertion failure and halt a hidden service. Fixes bug 15600; bugfix on 0.2.1.6-alpha. Reported by "disgleirio".

            </li>

          • Fix a bug that could cause a client to crash with an assertion failure when parsing a malformed hidden service descriptor. Fixes bug 15601; bugfix on 0.2.1.5-alpha. Found by "DonnchaC".

            </li> </ul>

          • Minor features (DoS-resistance, hidden service):

            </li>

            • Introduction points no longer allow multiple INTRODUCE1 cells to arrive on the same circuit. This should make it more expensive for attackers to overwhelm hidden services with introductions. Resolves ticket 15515.

              </li>

            • Decrease the amount of reattempts that a hidden service performs when its rendezvous circuits fail. This reduces the computational cost for running a hidden service under heavy load. Resolves ticket 11447.

              </li> </ul> </ul>

              詳細信息請查看發行頁面。

              其源代碼現已提供下載：

              https://dist.torproject.org/

              來自：http://www.oschina.net/news/61302/tor-0-2-5-12-0-2-6-7-released

               本文由用戶 jopen 自行上傳分享，僅供網友學習交流。所有權歸原作者，若您的權利被侵害，請聯系管理員。
               轉載本站原創文章，請注明出處，并保留原始鏈接、圖片水印。
               本站是一個以用戶分享為主的開源技術平臺，歡迎各類分享！
                本文地址：http://www.baiduhome.net/news/view/13e6bd7