[tahoe-lafs-trac-stream] [tahoe-lafs] #1942: replace google chart in wui with d3.js: it leaks information (was: google chart in wui leaks information)

tahoe-lafs trac at tahoe-lafs.org
Mon Apr 15 05:32:43 UTC 2013


#1942: replace google chart in wui with d3.js: it leaks information
--------------------------+------------------------------------------------
     Reporter:  leif      |      Owner:  nobody
         Type:  task      |     Status:  new
     Priority:  normal    |  Milestone:  1.11.0
    Component:  code-     |    Version:  1.9.2
  frontend-web            |   Keywords:  anonymity privacy security capleak
   Resolution:            |
Launchpad Bug:            |
--------------------------+------------------------------------------------
Changes (by warner):

 * owner:  daira => nobody
 * status:  assigned => new
 * type:  defect => task
 * milestone:  1.10.0 => 1.11.0


Comment:

 Ok, that patch updates known_issues.rst . We can now turn this ticket into
 "replace the timing chart with local d3.js".

 BTW, the leak was even smaller than I thought: the referrer URL only
 contains the count of mapupdate operations (basically any mutable-file
 read or write) since last node boot. It doesn't even include the storage-
 index of the file.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1942#comment:9>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list