-
plowsof11
i dont know what c++ is, and wasnt aware of the latest commits (only seen the 1st one) my apologies sir
-
ofrnxmr[m]
i really dont see what problem this pr hopes to solve
-
ofrnxmr[m]
torrc has options of its own for reconnects and circuit dirtiness.
-
ofrnxmr[m]
this reimplementation on monero isnt a monero problem
-
M53a45b263745298
Tor doesn't actively drop long-lived connections
-
M53a45b263745298
So circuit reuse ensues
-
M53a45b263745298
Tor doesn't actively drop any connections actually, not just long-lived
-
M53a45b263745298
Circuit dirtiness is for new streams
-
ofrnxmr[m]
NewCircuitPeriod 30
-
ofrnxmr[m]
MaxCircuitDirtiness 600
-
ofrnxmr[m]
EnforceDistinctSubnets 1
-
ofrnxmr[m]
CircuitsAvailableTimeout 86400
-
M53a45b263745298
Which one of those drops connecitons?
-
M53a45b263745298
I don't know what that reaction means?
-
moneromooo
Expecting users to tweak their tor config this way is not good. Much better to ensure monero uses it safely in the first place.
-
M53a45b263745298
That torrc doesn't do what he thinks it does, there is no way to modify torrc to actively drop connections
-
moneromooo
Also, historically vtnerd has been around only occasionally, so unobtrusively pinging from time to time is a good way to ensure this doesn't get forgot.
-
M53a45b263745298
Thanks, he responded above
-
ofrnxmr[m]
moneromooo: im not expecting users to tweak their tor configs, but "monero" cant build new tor circuits
-
ofrnxmr[m]
And onions are different than "circuits" that use exit nodes
-
M53a45b263745298
SOCKS clients (monerod) can force Tor to build new circuits
-
M53a45b263745298
IsolateSocksAuth flag is set by default on all Tor SocksPorts
-
M53a45b263745298
It is standard practice to use this for stream isolation
-
M53a45b263745298
Your configuration above does nothing to prevent circuit reuse whatsoever
-
vtnerd
M53a45b I thought only tor control connections could request new circuits, but socks 5 perhaps?
-
fedorafan
what makes it impossible to fake buyin
-
moneromooo
Your question was cut off.
-
moneromooo
If it's about markets (got cut off at "buyin") then try #monero-markets. Or #monero if not about monero development. Otherwise ask again here.
-
fedorafan
ah no its about development but fine
-
fedorafan
ah you dont provode every question to this channel?
-
moneromooo
Monero dev chat in #monero-dev. Market chat in #monero-market. Research in another. Catch all in #monero.
-
fedorafan
ok
-
M53a45b263745298
<vtnerd> "M53a45b I thought only tor..." <- SOCKS5 auth is the standard way for a stream (connection) to get its own circuit
-
M53a45b263745298
It's not "requesting a new circuit", it's "don't put this stream on a circuit with any other streams that have different auth"
-
M53a45b263745298
Which is the same effect
-
M53a45b263745298
I reference this in the PR, the host blocking won't be necessary once SOCKS5 exists
-
M53a45b263745298
I'm going to put it as one of the items for my CCS when I get around to it