On Mon, Jul 21, 2014 at 06:58:44PM -0400, Roger Dingledine wrote: > I think I have a handle on what they did, and how to fix it. We've been > trying to find delicate ways to explain that we think we know what they > did, but also it sure would have been smoother if they'd opted to tell > us everything. The main reason for trying to be delicate is that I don't > want to discourage future researchers from telling us about neat things > that they find. I'm currently waiting for them to answer their mail so > I can proceed.
I have timed out on them and put out two new releases plus a security advisory: https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack --Roger -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
