[Popcon-developers] Bug#773663: popularity-contest: Patch to enable Tor support

Bill Allombert ballombe at debian.org
Sun Dec 21 18:44:32 UTC 2014


On Sun, Dec 21, 2014 at 06:31:33PM +0000, Federico Ceratto wrote:
> Package: popularity-contest
> Version: 1.61
> Severity: wishlist
> 
> Hi,
> 
> Attached is a small patch to enable popcon submissions over Tor.
> It might help https://trac.torproject.org/projects/tor/ticket/13154
> Even with GnuPG encryption, regular HTTP submissions leaks the presence
> of a Debian[-derivative] OS and this could also be used to enumerate
> Debian hosts in a network; Also, popcon-upload could be forced to fall-back to
> SMTP and leak more information in the headers.
> 
> The patch relies on exit nodes to connect to the HTTP service and prevents
> SMTP fallback. If a popcon hidden service was to be set up in future, it could
> be used with:
> SUBMITURLS="http://HIDDEN_SERVICE_NAME/cgi-bin/popcon.cgi"

Hello Federico,

For some reason, your patch is empty: all I have is

commit 58af819641e879260b180558cac56cfd3f5d7333
Author: Federico Ceratto <federico.ceratto at gmail.com>
Date:   Sun Dec 21 16:49:16 2014 +0000

    Add Tor support

:100644 100644 2bf1d82... dbe674a... M  debian/control
:100644 100644 c45bccb... f3feaa7... M  debian/cron.daily
:100644 100644 433bc14... 718aa99... M  default.conf

Cheers,
-- 
Bill. <ballombe at debian.org>

Imagine a large red swirl here. 



More information about the Popcon-developers mailing list