Delivery-Date: Wed, 12 Aug 2015 23:02:55 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 9A3DA1E067A;
	Wed, 12 Aug 2015 23:02:53 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 0DE51367FB;
	Thu, 13 Aug 2015 03:02:44 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 49F86367F8
 for <tor-talk@lists.torproject.org>; Thu, 13 Aug 2015 03:02:40 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id nD0aOTQ4e0vF for <tor-talk@lists.torproject.org>;
 Thu, 13 Aug 2015 03:02:40 +0000 (UTC)
Received: from mx1.sigaint.org (mx1.sigaint.org [185.10.58.250])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "mx1.sigaint.org", Issuer "mx1.sigaint.org" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 464A0367CA
 for <tor-talk@lists.torproject.org>; Thu, 13 Aug 2015 03:02:31 +0000 (UTC)
Received: from sigaintevyh2rzvw.onion (localhost [127.0.0.1]);
 by localhost (OpenSMTPD) with ESMTP id aab0327d;
 for <tor-talk@lists.torproject.org>;
 Thu, 13 Aug 2015 03:02:20 +0000 (UTC)
Received: from 127.0.0.1 (HTTP authenticated user tomtidaly)
 by localhost with HTTP; Thu, 13 Aug 2015 03:02:20 -0000
Message-ID: <694ec6dc6a1280933af5e5cba6a54a4e.webmail@localhost>
Date: Thu, 13 Aug 2015 03:02:20 -0000
From: tomtidaly@sigaint.org
To: tor-talk@lists.torproject.org
MIME-Version: 1.0
X-Priority: 3 (Normal)
Importance: Normal
Subject: Re: [tor-talk] wget - secure?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

> On 2012-04-20, Robert Ransom wrote
<https://lists.torproject.org/pipermail/tor-talk/2012-April/024040.html>:

> No, the underlying point is that I have personally seen wget send my
> computer's IP address over Tor in an FTP PORT command.  wget is not
> =91100% safe=92.

> The code to send a PORT command is still present in wget 1.13.4.  wget
> 1.13.4 is not =91100% safe=92; anyone who wants to recommend it needs to
> specify a particular configuration of wget which is safe.  (Don't
> count on a =91default configuration=92; Linux distributors might have
> messed with it, or failed to update it to the version shipped in
> recent wget source distributions.)

> Robert Ransom

I asked a question asked about this issue on the wget mailing list this
week and a patch was provided by Tim Ruehsen. If you have time it would be
great if you read the mailing list discussion to see if I got the issue
correct, and if your happy with the patch.

https://lists.gnu.org/archive/html/bug-wget/2015-08/msg00020.html

-- =

tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

