Resolves bug 3909, found by Marco Bonetti.When it comes to recording and creating polished, professional, highly creative audio files, one of the most popular software that comes to mind is Mixcraft.
Search for a platform-specific version of "ar" when cross-compiling.Should fix builds on iOS. Clean up some code issues that prevented Tor from building on olderBSDs. Provide a substitute implementation of lround() for MSVC, whichapparently lacks it. Previously, the logmessage said that "" were permitted that could havegiven the impression that every ASCII character between "+" and "_"was permitted. Clarify a log message specifying the characters permitted inHiddenServiceAuthorizeClient client names. 
Bugfix on 0.2.1.6-alpha fixes partof bug 2442. There is nothing that a hidden service's operator can doto fix its clients' clocks.
Demote the 'INTRODUCE2 cell is too ' log message to infolevel. Bugfix on 0.2.1.6-alpha fixes part of bug 2442. A normal Tor client can cause thatlog message during its normal operation. Demote the 'replay detected' log message emitted when a hiddenservice receives the same Diffie-Hellman public key in two differentINTRODUCE2 cells to info level. Bugfix on 0.2.0.7-alpha,when we decided to allow these config options to both be set. 
Correct the man page to explain that HashedControlPassword andCookieAuthentication can both be set, in which case either methodis sufficient to authenticate to Tor. Minor bugfixes (documentation and log messages): Update to the SeptemMaxmind GeoLite Country database. 
Add a VoteOnHidServDirectoriesV2 config option to allow directoryauthorities to abstain from voting on assignment of the HSDirconsensus flag.Change the default required uptime for a relay to be accepted asa HSDir (hidden service directory) from 24 hours to 25 hours.Improves on 0.2.0.10-alpha resolves ticket 2649.Adjust the expiration time on our SSL session certificates tobetter match SSL certs seen in the wild.We thinkthat these attacks are infeasible (requiring the attacker to sendon the order of zettabytes of altered cells in a short interval),but we'd rather block them off in case there are any classes ofthis attack that we missed.
This prevents a possible class of active attacksby an attacker who controls both an introduction point and arendezvous point, and who uses the malleability of AES-CTR toalter the encrypted g^x portion of the INTRODUCE1 cell.
Check for replays of the public-key encrypted portion of anINTRODUCE1 cell, in addition to the current check for replays ofthe g^x value. Avoid an assertion failure when reloading a configuration withTrackExitHosts changes.
0 kommentar(er)
