Opened 4 years ago

Closed 16 months ago

#18702 closed enhancement (wontfix)

Downloaded files integrity

Reported by: cypherpunks Owned by: cypherpunks
Priority: Medium Milestone:
Component: Archived/Ponies Version:
Severity: Normal Keywords: archived-closed-2018-07-04
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


Malicious exit nodes can modify downloaded files in the way they will cause malicious activity. For example, they can add malware to executables or embed exploit into PDFs. Most of binaries in the Web are non-signed and downloaded via http. Even if they were signed, there is no way for a Tor user to know that they were signed prior malicious modification removing any trace of a signature.

So we need a bot downloading different binaries via different exit nodes and non-torified connections, comparing the results and blacklisting malicious exit nodes.

Naive implementation is vulnerable to the attack: a malicious website can give a randomized binary to victim exit nodes causing them to be blacklisted. Malicious CDNs or NSA hardware in main ISPs can be much more dangerous and stealthy.

Maybe we should ship a db of hashes of popular binaries (programs, pdfs, etc) and check their integrity?

Child Tickets

Change History (7)

comment:1 Changed 4 years ago by cypherpunks

Type: defectenhancement

There already has been research done on this subject. See

comment:2 Changed 4 years ago by twim

Yes, we do have such a bot - it's called exitmap

comment:3 Changed 4 years ago by bugzilla

Integration with

comment:4 Changed 4 years ago by cypherpunks

Component: Tor Browser- Select a component

This doesn't fall under Tor Browser.

comment:5 Changed 3 years ago by isis

Component: - Select a componentArchived/Ponies

This seems like a great research project for someone (but not necessarily for our engineers).

comment:6 Changed 3 years ago by gk

Owner: changed from tbb-team to cypherpunks
Status: newassigned

comment:7 Changed 16 months ago by teor

Keywords: archived-closed-2018-07-04 added
Resolution: wontfix
Status: assignedclosed

Close all tickets in archived components

Note: See TracTickets for help on using tickets.