loop-uh
b4d1418e81
Salt the logged SNI hash, because unsalted it named the domain
...
The masqueraded domain is logged as a hash so a log can be shared
without naming it. That did not hold: the name is short and drawn
from a small set of plausible ones, so eight bytes of SHA-256 fall
to a wordlist immediately - www.google.com came back out of a real
log this way in under a second, from 12900 candidates, while
working out which relay a user was on.
The salt is sixteen random bytes drawn once per run and hashed
before the domain, so no prefix of the digest depends on the domain
alone. What the field is actually for still works: inside one log,
connections carrying the same name still share a hash. Across two
logs they no longer line up, which is the right trade for a field
whose whole purpose was to not name the domain.
Both report builders now go through one helper; neither hashes the
domain directly. Guarded, including that the salt is drawn once
rather than per call - per call would leave the field useless for
matching within a log.
2026-07-26 19:15:13 +03:00
..
_other
Self-hosted auto-updates via GitHub releases
2026-07-05 13:25:13 +03:00
api
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
boxes
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
calls
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
chat_helpers
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
codegen /scheme
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-14 18:46:38 +03:00
core
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
countries
Restructure mtproto ownership
2026-07-08 00:07:46 +03:00
data
Include the full MTP::Instance type in passkeys
2026-07-25 19:32:51 +03:00
dialogs
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
editor
Fix possible clamp contract violation.
2026-07-04 16:46:46 +04:00
export
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-14 18:46:38 +03:00
ffmpeg
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
history
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
info
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
inline_bots
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
intro
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
iv
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
lang
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
layout
Moved out highlight scroll logic from sections to single place.
2026-03-30 11:01:56 +03:00
main
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
media
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
menu
Moved toggling of mute forever to separate helper.
2026-07-24 17:12:25 +03:00
mtproto
Salt the logged SNI hash, because unsalted it named the domain
2026-07-26 19:15:13 +03:00
overview
Moved video tile scaling off main thread in overview layout.
2026-07-15 13:11:47 +04:00
passport
Restructure mtproto ownership
2026-07-08 00:07:46 +03:00
payments
Restructure mtproto ownership
2026-07-08 00:07:46 +03:00
platform
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
poll
[poll-create] Extracted poll answer link box helper into shared module.
2026-06-09 14:28:12 +04:00
profile
Removed 114 unused style entries.
2026-05-04 11:32:33 +07:00
settings
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
statistics
Fixed long chart filter labels in statistics.
2026-05-05 10:45:43 +04:00
storage
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
support
Restructure mtproto ownership
2026-07-08 00:07:46 +03:00
tde2e
tests
Salt the logged SNI hash, because unsalted it named the domain
2026-07-26 19:15:13 +03:00
ui
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
window
Name the camouflage answer instead of blaming the digest
2026-07-26 00:15:27 +03:00
apiwrap.cpp
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-25 17:07:59 +03:00
apiwrap.h
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-14 18:46:38 +03:00
config.h
Self-hosted auto-updates via GitHub releases
2026-07-05 13:25:13 +03:00
logs.cpp
мне лень описывать всё изменения - ОНИ ОГРОМНЫ
2026-07-07 23:05:20 +03:00
logs.h
Add mtproxy logs and proxy statuses; CI->Release
2026-06-28 15:36:15 +03:00
main.cpp
mainwidget.cpp
Merge remote-tracking branch 'upstream/dev' into dev
2026-07-14 18:46:38 +03:00
mainwidget.h
Restructure mtproto ownership
2026-07-08 00:07:46 +03:00
mainwindow.cpp
Fixed settings opening under boxes without session.
2026-07-24 17:22:38 +03:00
mainwindow.h
Fixed back from new account intro focusing wrong window.
2026-06-22 11:51:49 +03:00
settings.cpp
[ai] Add -testagent for silent crashes.
2026-07-02 17:49:02 +04:00
settings.h
Make -cleanup stop the running app on uninstall
2026-07-20 23:14:37 +04:00
stdafx.h
Avoid full Telegram target rebuild on version change
2026-06-15 17:05:51 +04:00
tray.cpp
Added accounts list to tray menu on macOS.
2026-02-28 19:07:08 +04:00
tray.h
tray_accounts_menu.cpp
Added passcode lock check to Dock and Tray account menus.
2026-05-22 09:53:43 +03:00
tray_accounts_menu.h
Added accounts list to tray menu on macOS.
2026-02-28 19:07:08 +04:00
tray_accounts_menu_dummy.cpp
Added accounts list to tray menu on macOS.
2026-02-28 19:07:08 +04:00