Giter VIP home page Giter VIP logo

Comments (5)

evilaliv3 avatar evilaliv3 commented on June 15, 2024

I'm testing the patch and working on this issue and these are my actual considerations:

  • the Tor patch proposed is for socks5 protocol and actually we implement only socks4.
  • i dont think useful to have socks5 implementation in tor2web actually as IMHO we will not make use of any of the socks5 additional features; in fact, regarding socks authentication and security, Tor will be present on the same machine of Tor2web so it's safe to use socks4a permitting only local connections and the use of socks5 would result in a pure overhead of parsing (Tor2web side / Tor side).

So, in our strict tor2web interest, we have to take decision on the protocol:

  • Socks4a
  • Socks5,
  • Both with selection by config file.

If we decide to adopt socks4a we NEED a new Tor patch. irrespective of this decision, I propose to implement it.
The patch would be simple to write, because the socks4 specification document (http://ftp.icm.edu.pl/packages/socks/socks4/SOCKS4.protocol), while not talking directly about unspecified values, make effectively use of a byte for the status response and use only 4 values to represent it.

from tor2web.

fpietrosanti avatar fpietrosanti commented on June 15, 2024

I don't have an answer, but imho the logic should depend on whenever Tor Project is focusing most on socks4a code or socks5 code.

I wrote on irc #tor-dev:
naif
Hi all, is tor implementing/focusing more on Socks4a or on Socks5?
the fix on https://trac.torproject.org/projects/tor/ticket/6031 is done for Socks5 code
But on Tor2web we have Python socks4a code
so the matter is a) implement ticket #6031 on Socks4 code in Tor b) Implement a Socks5 client in Tor2web/Python ?
I would say that this depends on which is the strongest focus of Tor, whenever Socks4a or Socks5

Still no naswer.

In case we want to just add/introduce Socks5 code in python for twisted:
http://twistedmatrix.com/trac/ticket/1330

from tor2web.

fpietrosanti avatar fpietrosanti commented on June 15, 2024

Nick Matwinson said:
nickm
net here is bad so I can explain much, but I don't think that SOCKS4 even supports error codes. There is one defined value for success, and one for failure. IIRC.
adding a new error value would not merely be an extension, but a standards violation

So, it seems that socks5 python code on twisted/tor2web maybe a good path from nick's point of view.

Is it a major issue?

from tor2web.

evilaliv3 avatar evilaliv3 commented on June 15, 2024

Socks4/4a is not a standard or rfc, but only a proposal become a de facto standard.
However I fully agree with Nick, such a patch probably would break some clients not handling unspecified values.

Allright so i'm going to implement Socks5 in place of Socks4a. No problem at all.

from tor2web.

evilaliv3 avatar evilaliv3 commented on June 15, 2024

socksv5 implemented and errors handled with reference to Hellais Tor path.
c956ab9

from tor2web.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.