Date: Mon, 26 Feb 2018 00:43:03 -0500 From: grarpamp <grarpamp@gmail.com> To: freebsd-security@freebsd.org Subject: Fwd: [tor-relays] FreeBSD 11.1 ZFS Tor Image Message-ID: <CAD2Ti2_0JFA9h%2BofxkhQsBWd8m9kipKmMNWko4J9ntnS=d-oRA@mail.gmail.com> In-Reply-To: <20180225221733.o6jrgeo2d5mfdegg@mutt-hbsd> References: <1778362.rEQJjLh0zu@beastie> <735f5c0a-f6a3-adb4-c615-7e0ce8fb6dea@queair.net> <20180225215044.vzuablpgcweaxwlh@mutt-hbsd> <2537598.fuWUYQZvu7@beastie> <20180225221733.o6jrgeo2d5mfdegg@mutt-hbsd>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] ---------- Forwarded message ---------- From: Shawn Webb <shawn.webb@hardenedbsd.org> Date: Sun, Feb 25, 2018 at 5:17 PM Subject: Re: [tor-relays] FreeBSD 11.1 ZFS Tor Image To: tor-relays@lists.torproject.org On Sun, Feb 25, 2018 at 04:03:49PM -0600, Conrad Rockenhaus wrote: > Wow, I didn't expect my friendly gesture to start another debate, but the > reasoning behind offering this image was mainly for people who were operating > on OpenStack clouds who wanted to upload the image to their infrastructure > using glance and start things up quickly. I'm more than willing to provide the > ansible scripts I use to initially spin things up, once I clean things up > since there's still some manual things that can be automated. > > I'll just consider this idea dead in the water. That being said: > > On Sunday, February 25, 2018 3:50:44 PM CST Shawn Webb wrote: > > On Sun, Feb 25, 2018 at 09:05:00PM +0000, George wrote: > > > Conrad Rockenhaus: > > > > Hello All, > > > > > > > > If anyone is interested, I have a RAW image of a FreeBSD 11.1 ZFS image > > > > that is fully configured and ready to run Tor. Right now it's an eight > > > > GB image, but I'm reducing the size by removing all of the extra stuff > > > > on it from the upgrade from FreeBSD 11 to 11.1. > > > > > > I think it's great to ease the implementation of Tor relays, > > > particularly on BSDs. > > > > > > However, I'd be wary of an image that I didn't build myself, personally. > > > > I agree with that sentiment. I would rather Tor relay operators set up > > their systems themselves so that they know how that system is > > configured. > > > > I would also suggest users run operating systems that specialize in > > security, like OpenBSD or HardenedBSD. Running Tor on FreeBSD opens > > the door to mass exploitation via copy and paste style exploits. I > > would caution against such setups. Tor has a very unique threat > > landscape and the security of the relay should be of upmost > > importance. > > I'll be honest, I have never heard of a copy and paste style exploit. What is > it? Could you provide me a link with info about it, because I run several > FreeBSD instances and if I have a ticking timebomb on my hands, I need to fix > it. With FreeBSD's complete lack of exploit mitigations, all tor instances running on like FreeBSD systems can be exploited the same way. The memory layout is predictable, memory mappings can be writable and executable, etc. The virtual memory layout of tor on your FreeBSD 11.1-RELEASE-p6 instance is going to be the exact same as John Smith's instance. This means that attackers can write their exploits with 100% reliability, even with virtual memory addresses hardcoded. There's no need for ROP, JOP, SROP, etc. on FreeBSD. FreeBSD is literally stuck in 1999-era security. Writing exploits for such systems is extremely easy for today's offensive security researchers. FreeBSD really needs ASLR and W^X, at a minimum, for me to put even the slightest trust in for applications that are security-sensitive (like tor). Until then, I'd encourage Tor relay operators to make use of operating systems that put a focus on security, like OpenBSD or HardenedBSD. Just yesterday, I was notified of yet another FreeBSD box getting popped by an offensive security researcher. Thanks, -- Shawn Webb Cofounder and Security Engineer HardenedBSD Tor-ified Signal: +1 443-546-8752 GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEKrq2ve9q9Ia+iT2eaoRlj1JFbu4FAlqTNfcACgkQaoRlj1JF bu5lZA//WyG+/w9L+GuZemK6/QoCx9j5xNMD7ENWTYq6mCIyvBzfoP+13z/8QGWb D7xKO2hnhH7Z2q1k3YFbswUOUByST/KUKQ1L3JqU44QaGJ+8NdVv95503o7im/SC 9fBNc05rpHH1ZNilMXI67N109hf1GOz//eDTNIsWAtPE9C374yxGgPyWPkJ4lr3p MdxEXWjZGmmdXhQCIi/+0uflef07eCU1jCLJD3p1/pfiKatQn4o4RyMSIkJECTgs SSmoWRX7+Df9Vz0mfUTCQFbcFyjCIWK+HAFNdNG5Wz6V9bkXoXQhi6xJ5akIErSF 1rRoTqlUdr6mWhVJVT16ZgAZFiVPTvu27KFQYLXC30k5yrdbbof7GsudGtbppxHK 5arbxcI4/a2ULNtj99IFRSH2wWfDxOs0fjkkUHQqpcb9zwK+H7s5gP5As6Axr6bY 2qpJQ66oW3uYuzGBsE64lSIt1NluXFKAremtD7sP4xZyeSyzonlhERHZKVXjiExn P9atV6VYoHVv6ARV5UzF9NwBEl+RgSIidgE7q72NIZk7Yq0VPqHOBo3g6P4FI+u/ 4y/d6anrZ4RcuytW5JeKZZbUmeW4hN8hp21aRxp/FK/t4r0yoVMktr7VhbP3xa8Z 4e/ZGx13dTvNqMG5I4Nx7kqBHPVl5Rd04HnRWMYrRquCkyGf2f4= =l3ma -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAD2Ti2_0JFA9h%2BofxkhQsBWd8m9kipKmMNWko4J9ntnS=d-oRA>