#13347 |
TicketMaster stadium view does not load
|
TicketMaster
|
needs_information
|
zyan
|
defect
|
Medium
|
#13367 |
Rate limit gyroscope sampling frequency on FF mobile
|
tbb-security, tbb-fingerprinting, tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#13400 |
Canvas Fingerprinting: fonts
|
tbb-testcase, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
High
|
#13453 |
circular link, outdated info on orbot info page
|
website, chatsecure, gibberbot, tor, proxy, transparent, polipo, privoxy, android, webpage
|
new
|
n8fr8
|
defect
|
Low
|
#13727 |
BridgeDB should not distribute Tor Browser's default bridges
|
bridgedb-dist, tbb-bridges, anti-censorship-roadmap-september, s30-o23a1
|
assigned
|
|
defect
|
Medium
|
#13817 |
Untange kludgey library detection, particularly for SSL forks
|
tor-build build library-detection
|
new
|
|
defect
|
High
|
#13893 |
Torbrowser crashes on start when using MS EMET 5.x
|
tbb-security, tbb-crash, tbb-usability-stoppoint-app, fuck-mingw-gcc, GeorgKoppen201609, TorBrowserTeam201610, ff52-esr
|
assigned
|
tbb-team
|
defect
|
High
|
#13912 |
Key Security: Zeroing Buffers Is Insufficient (AES-NI leaves keys in SSE registers)
|
security registers aesni memwipe tor-relay
|
new
|
|
defect
|
Medium
|
#13929 |
Increase Authority reachability testing rate with low TestingAuthDirTimeToLearnReachability
|
testing, chutney, SponsorS-deferred, tor-dirauth
|
new
|
|
defect
|
Medium
|
#13937 |
Allow the use of NoScript in whitelist mode
|
ux ui noscript
|
new
|
tbb-team
|
defect
|
Medium
|
#13976 |
Simplify adjustment of consensus speed in testing tor networks
|
lorax, chutney, testing, tor-relay, robustness
|
new
|
|
defect
|
Medium
|
#14006 |
Hidden service error: "We'd like to launch a circuit to handle a connection, but we already have 32 general-purpose client circuits..."
|
tor-hs, circuit-management, scaling, 033-triage-20180320, 033-removed-20180320, 033-removed-20180403, tor-dos
|
needs_information
|
|
defect
|
Medium
|
#14034 |
Make TestingDirAuthVoteGuard/Exit/HSDir and AssumeReachable less essential in test networks
|
chutney, lorax, SponsorS-deferred, tor-dirauth, testing, test-support
|
new
|
|
defect
|
Medium
|
#14056 |
IPredator complains that we call time() too much when running over 500Mbps
|
performance tor-relay lorax syscall vdso
|
new
|
|
defect
|
Medium
|
#14066 |
SIGHUP: Reloading config and does not reset internal state of accounting
|
tor-relay accounting hibernation hup state
|
new
|
|
defect
|
Very Low
|
#14186 |
Try to use fchmod() first when changing permissions on an AF_UNIX socket
|
tor-client tor-relay posix permissions
|
new
|
|
defect
|
Medium
|
#14197 |
Reverse lookup on automapped addresses doesn't work
|
dns tor-client needs-design
|
new
|
|
defect
|
Low
|
#14223 |
END_STREAM_REASON_TIMEOUT blurs together two very different error cases
|
tor-client error-case needs-spec
|
new
|
|
defect
|
Medium
|
#14266 |
Make address mapping conditional on having the particular address mapping types enabled.
|
tor-client refactoring
|
new
|
|
defect
|
Low
|
#14269 |
Imported certificate doesn't works at all
|
TBB, certificate
|
new
|
tbb-team
|
defect
|
High
|
#14322 |
torsocks fails to wrap setcap binaries
|
setcap setuid LD_PRELOAD torsocks
|
assigned
|
|
defect
|
Medium
|
#14354 |
Improve torflow engineering quality and deployment procedure
|
tor-dirauth, torflow, technical-debt
|
new
|
|
defect
|
High
|
#14579 |
Clients cannot use multiple transports with a single bridge
|
tor-client tor-bridge tor-pt
|
new
|
|
defect
|
Medium
|
#14581 |
Looking up bridge by ID may choose the wrong bridge
|
tor-bridge tor-guards tor-pt refactor
|
new
|
|
defect
|
High
|
#14715 |
Change the default for automaphostsonresolve to be on-by-default?
|
tor-client needs-decision
|
new
|
|
defect
|
Medium
|
#14799 |
Make failure to create extrainfo an error?
|
tor-relay needs-decision
|
reopened
|
|
defect
|
Low
|
#14801 |
"EXCLUDE Nodes" is not respected in Orbot
|
Strict Nodes, Orbot, Exclude Nodes,
|
needs_information
|
n8fr8
|
defect
|
Medium
|
#14827 |
Tor controller command to write its file to disk
|
tor-client tor-control needs-design
|
new
|
|
defect
|
Medium
|
#14854 |
Document the hardlimit of HiddenServiceAuthorizeClient basic
|
tor-hs, tor-doc, hs-auth
|
new
|
|
defect
|
Medium
|
#14883 |
Orbot handshake fails on networks with Blue Coat Systems' technology
|
Blue, coat, systems, proxySG
|
new
|
n8fr8
|
defect
|
Medium
|
#14900 |
To link connections only if they ready
|
tor-client correctness needs-interpretation
|
reopened
|
|
defect
|
Medium
|
#14921 |
Investigate whether we sometimes remove all predicted ports at startup
|
needs-investigation tor-client predicted-ports
|
new
|
|
defect
|
Medium
|
#14939 |
Support ipv6 addresses in Tor Circuit DIsplay
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#14957 |
Clients wait for an extra consensus before learning the correct UseGuardFraction value
|
tor-client, tor-guard, SponsorU-deferred, 032-unreached
|
new
|
|
defect
|
Medium
|
#14985 |
NoScript Clickjacking warning when clicking on embedded content
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
High
|
#14999 |
Most/all esc_for_log instances in control.c should change.
|
tor-spec, tor-control needs-design
|
new
|
|
defect
|
Medium
|
#15000 |
bring some sanity to quoted strings in the controller api
|
tor-client, needs-proposal, tor-control tor-spec
|
needs_revision
|
|
defect
|
Medium
|
#15008 |
Design an opt-in Hidden Service Public Directory Submission system
|
tor-hs needs-design research-program
|
new
|
|
defect
|
Low
|
#15043 |
Use acx_pthread.m4 to find pthreads library
|
easy tor-relay build autoconf pthreads
|
new
|
|
defect
|
Medium
|
#15054 |
Complete implementation of prop220 (ed25519 identity keys)
|
tor-crypto-identity, tor-ed25519-proto
|
assigned
|
|
defect
|
Low
|
#15061 |
Support Ed25519 identities in controller interface
|
needs-proposal, prop220, needs-design tor-client tor-control
|
assigned
|
|
defect
|
Low
|
#15062 |
Support identifying nodes by ed25519 keys in state file, other misc files
|
needs-spec, prop-220, SponsorU-deferred
|
assigned
|
|
defect
|
Low
|
#15214 |
networkstatus_compute_consensus() is unreasonably large and should be refactored
|
tor-client refactor technical-debt intro
|
new
|
|
defect
|
Medium
|
#15232 |
Specify a potential TLS-replacing protocol for future use in Tor.
|
SponsorZ, needs-proposal, spec sponsor3-maybe
|
new
|
|
defect
|
Medium
|
#15239 |
Add hyperlinks in tor circuit display to show "more info" about relays
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#15380 |
log messages are doubled and unclear
|
tor-relay accounting log-message usability
|
new
|
|
defect
|
Very Low
|
#15404 |
BridgeDB's email localisation isn't working
|
bridgedb-ui, localization, anti-censorship-roadmap, s30-o22a3
|
assigned
|
|
defect
|
Low
|
#15470 |
cannot edit the certificates in Tor browser,
|
tbb-security, CNNIC
|
reopened
|
tbb-team
|
defect
|
Very High
|
#15514 |
Trim the NoScript whitelist
|
tbb-security, noscript
|
assigned
|
tbb-team
|
defect
|
Medium
|
#15532 |
Tor Browser 4.5 displays signature validation error during update
|
tbb-firefox-patch, ff38-esr, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
#15557 |
Improve relaunch logic for failed rendezvous circuits
|
tor-hs, tor-client, prop224, prop224-extra
|
new
|
|
defect
|
Low
|
#15607 |
Tor log dates imprecise
|
tor-client tor-relay log usability needs-design
|
needs_revision
|
|
defect
|
Medium
|
#15660 |
[feature suggestion] Need signal to totally switch to the new set of circuits
|
security needs-design tor-client
|
new
|
|
defect
|
Medium
|
#15661 |
Same "non-loopback address" notice is printed twice
|
easy, intro, usability tor-relay torrc configuration bootstrap
|
new
|
|
defect
|
Very Low
|
#15687 |
Make Tor Browser work with AppLocker
|
tbb-security, tbb-usability-stoppoint-app
|
new
|
tbb-team
|
defect
|
Medium
|
#15692 |
'GETINFO config-file' command on ControlPort returns the standard torrc file when it was overridden in the command line
|
tor-control correctness easy
|
new
|
|
defect
|
Medium
|
#15713 |
toggling DisableNetwork during bootstrap causes delay
|
tor-client, bootstrap, delay, sponsor8-maybe, tbb-needs
|
accepted
|
arma
|
defect
|
Medium
|
#15715 |
spurious "Network is unreachable" error after setting DisableNetwork=1
|
tor-client, bootstrap, sponsor8-maybe, disablenetwork, tbb-needs
|
accepted
|
arma
|
defect
|
Medium
|
#15785 |
New proxy settings don't close old TLS connections
|
tor-client proxy setting configuration torrc consistency
|
new
|
|
defect
|
Medium
|
#15802 |
add automated tests for svg.in-content.enabled
|
tbb-testcase, ff78-esr
|
new
|
tbb-team
|
defect
|
Medium
|
#15825 |
webgl.disable-extensions true about:config setting may allow DoS and breaks websites
|
tbb-security, tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
#15930 |
Orbot fails to connect using VPN Mode (using Outbound Proxy)
|
orbot-15.0.0-rc3
|
new
|
n8fr8
|
defect
|
Medium
|
#15938 |
HS descriptor cache leaks timing information to local users
|
tor-hs, tor-client needs-design maybe-bad-idea
|
new
|
|
defect
|
Medium
|
#16027 |
APPLICATION_VERIFIER_NETWORKING_WSA_NOT_INITIALIZED in tor (via torbrowser 4.5.1)
|
Application Verifier, WSA_NOT_INITIALIZED
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#16070 |
Tor log doesn't have to be world readable
|
tor-client log permissions umask
|
new
|
|
defect
|
Low
|
#16156 |
Tor browser does not display correct exit node
|
circuit compromised
|
new
|
tbb-team
|
defect
|
High
|
#16255 |
Guardfraction on dirauths screws up bandwidth weights
|
tor-dirauth, tor-guard, mike-can, SponsorU-deferred
|
needs_revision
|
asn
|
defect
|
High
|
#16294 |
Unable to bootstrap when no relays meet criteria; logging messages unhelpful
|
tor-client, bootstrap, logging
|
new
|
|
defect
|
Low
|
#16327 |
NavigatorLanguage API needs a testcase for intl pref
|
tbb-testcase
|
assigned
|
boklm
|
defect
|
Medium
|
#16348 |
Suppress exception chaining when PEP 3134 is merged
|
controller unactionable
|
accepted
|
atagar
|
defect
|
Low
|
#16350 |
tor.pid should be deleted on exit in every case possible, like assert termination, and catchable signals
|
tor-relay cleanup
|
new
|
|
defect
|
Medium
|
#16366 |
tor hangs for 30 seconds when parsing torrc ending in backslash-newline
|
lorax tor-relay tor-client configuration newline osx torrc
|
new
|
|
defect
|
Low
|
#16394 |
orbot bug for HTC One M9
|
Connectivity, bug, error
|
new
|
n8fr8
|
defect
|
Medium
|
#16453 |
View Source doesn't work on Tor Browser with HTTP AUTH
|
tbb-firefox-patch, tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
#16546 |
Should we move anonbib to the Tor website?
|
defer-new-website, ux-team, research
|
assigned
|
cypherpunks
|
defect
|
Medium
|
#16559 |
bwauth code needs to be smarter about failed circuits
|
tor-bwauth, sbws, scanner
|
assigned
|
juga
|
defect
|
Medium
|
#16562 |
Harmonize curve25519-signature format with what others are doing
|
tor-relay x25519 cross-signature needs-design
|
new
|
|
defect
|
Medium
|
#16579 |
(Sandbox) Caught a bad syscall attempt (syscall socket)
|
029-backport tor-client tor-relay linux sandbox 32bit
|
accepted
|
nickm
|
defect
|
Medium
|
#16585 |
Long-running activity in scheduler_run() blocks network, creating information leaks
|
tor-client guard side-channel
|
new
|
|
defect
|
Medium
|
#16598 |
fsync ed25519 master key files before closing them.
|
ed25519 tor-relay fsync easy
|
assigned
|
|
defect
|
Very Low
|
#16621 |
Can we merge torbutton_do_new_identity with Clear Private Data?
|
tbb-torbutton-conversion
|
new
|
tbb-team
|
defect
|
Medium
|
#16646 |
Cannibalized intro point circuits are now 4 hops, instead of 3 (HS-side)
|
tor-hs, performance, research, prop247, tor-hs
|
new
|
|
defect
|
Medium
|
#16648 |
Libevent configuration doesn't use pkg-config
|
tor-build libevent pkg-config
|
new
|
|
defect
|
Medium
|
#16740 |
Font defense in 5.0a4 crashes OS X 10.6.8
|
tbb-crash, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
#16782 |
systemd unit file is not compatible with the AppArmorProfile= directive
|
systemd, apparmor, debian, packaging
|
new
|
|
defect
|
Medium
|
#16805 |
Improve unit-test coverage on old and/or pure-ish functions/modules in src/or
|
testing, tor-tests-coverage, tor-tests-unit
|
new
|
|
defect
|
High
|
#16809 |
High coverage on node/path selection functions
|
testing, tor-tests-coverage, tor-tests-unit
|
new
|
|
defect
|
High
|
#16824 |
Emit a warning message about side channel leaks when using relays as clients
|
mike-can, tor-client, tor-relay, tor-log, sidechannel, easy, 035-triaged-in-20180711, 040-deferred-20190220
|
needs_revision
|
|
defect
|
High
|
#16826 |
Add a mechanism to allow callgraph generator to find vtbl-like constructions
|
testing, callgraph, calltool, needs-insight
|
new
|
|
defect
|
Medium
|
#16844 |
Slow clients can't bootstrap because they expire their consensus fetch but then receive all the bytes from it anyway, making them expire their next fetch, putting them in a terrible loop
|
needs-proposal, tor-client, low-bandwidth, sponsor4, bootstrap, 032-unreached
|
new
|
|
defect
|
High
|
#16849 |
clear_status_flags_on_sybil might want to clear more flags
|
SponsorS-deferred, technical-debt, tor-dirauth, pending-disaster, review-group-32, review-group-34, 034-triage-20180328
|
needs_revision
|
ffmancera
|
defect
|
High
|
#16888 |
Regression tests for Bug #2950 (Make Permissions Manager memory-only) never fails
|
tbb-testcase
|
new
|
tbb-team
|
defect
|
Medium
|
#16926 |
Multiple OS: Tor Browser leaks domains to system DNS management.
|
tbb-security
|
new
|
tbb-team
|
defect
|
Very High
|
#16936 |
Circuit display should show original circuit for each tab
|
tbb-torbutton, tbb-circuit-display
|
new
|
tbb-team
|
defect
|
Medium
|
#16981 |
NoScript Option
|
noscript, tbb-usability
|
assigned
|
ma1
|
defect
|
Medium
|
#17022 |
Tor Browser segfault during JavaScript Garbage Collection on OS X
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#17028 |
silently ignore a bad/missing --defaults-torrc
|
easy tor-client bootstrap
|
needs_revision
|
|
defect
|
Medium
|
#17032 |
Threadpool doesn't get shutdown when changing from relay to client
|
lorax tor-client tor-relay configuration
|
new
|
|
defect
|
Low
|
#17091 |
Support our own hotfix mechanism
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
#17101 |
Tests for connection_ap_handshake_rewrite_and_attach
|
coverage, tor-tests-coverage, tor-tests-unit
|
needs_revision
|
ipazmino
|
defect
|
Medium
|