{"action":"created","issue":{"url":"https://api.github.com/repos/mikeperry-tor/vanguards/issues/20","repository_url":"https://api.github.com/repos/mikeperry-tor/vanguards","labels_url":"https://api.github.com/repos/mikeperry-tor/vanguards/issues/20/labels{/name}","comments_url":"https://api.github.com/repos/mikeperry-tor/vanguards/issues/20/comments","events_url":"https://api.github.com/repos/mikeperry-tor/vanguards/issues/20/events","html_url":"https://github.com/mikeperry-tor/vanguards/issues/20","id":346408343,"node_id":"MDU6SXNzdWUzNDY0MDgzNDM=","number":20,"title":"Better DropMark defense","user":{"login":"mikeperry-tor","id":7707841,"node_id":"MDQ6VXNlcjc3MDc4NDE=","avatar_url":"https://avatars1.githubusercontent.com/u/7707841?v=4","gravatar_id":"","url":"https://api.github.com/users/mikeperry-tor","html_url":"https://github.com/mikeperry-tor","followers_url":"https://api.github.com/users/mikeperry-tor/followers","following_url":"https://api.github.com/users/mikeperry-tor/following{/other_user}","gists_url":"https://api.github.com/users/mikeperry-tor/gists{/gist_id}","starred_url":"https://api.github.com/users/mikeperry-tor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikeperry-tor/subscriptions","organizations_url":"https://api.github.com/users/mikeperry-tor/orgs","repos_url":"https://api.github.com/users/mikeperry-tor/repos","events_url":"https://api.github.com/users/mikeperry-tor/events{/privacy}","received_events_url":"https://api.github.com/users/mikeperry-tor/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-08-01T00:48:26Z","updated_at":"2018-08-01T21:51:18Z","closed_at":"2018-08-01T21:51:18Z","author_association":"OWNER","body":"Right now we allow 11 cells to be dropped on a circuit before closing it. This is because up to 10 SENDMEs can be in flight on a connection when it is closed, plus an END cell. If a service transmits enough data to elicit 10 SENDMEs from a client and then closes the connection, it will get these 11 cells on a stream-id that is no longer valid, and thus these cells count as dropped.\r\n\r\nTo avoid false positives from this, we set the limit of dropped cells to 11 on all circuits. However, what we could do instead is make this 11 cell limit based on how much data a circuit has sent, and not allow any dropped cells until enough data was sent to produce SENDMEs from the other side.\r\n\r\nThis change would completely close off the vector used by [DropMark](https://petsymposium.org/2018/files/papers/issue2/popets-2018-0011.pdf), which sends the dropped cells very early in the circuit (because it is normally silent then, and thus the dropped cells are easier to spot)."},"comment":{"url":"https://api.github.com/repos/mikeperry-tor/vanguards/issues/comments/409736211","html_url":"https://github.com/mikeperry-tor/vanguards/issues/20#issuecomment-409736211","issue_url":"https://api.github.com/repos/mikeperry-tor/vanguards/issues/20","id":409736211,"node_id":"MDEyOklzc3VlQ29tbWVudDQwOTczNjIxMQ==","user":{"login":"mikeperry-tor","id":7707841,"node_id":"MDQ6VXNlcjc3MDc4NDE=","avatar_url":"https://avatars1.githubusercontent.com/u/7707841?v=4","gravatar_id":"","url":"https://api.github.com/users/mikeperry-tor","html_url":"https://github.com/mikeperry-tor","followers_url":"https://api.github.com/users/mikeperry-tor/followers","following_url":"https://api.github.com/users/mikeperry-tor/following{/other_user}","gists_url":"https://api.github.com/users/mikeperry-tor/gists{/gist_id}","starred_url":"https://api.github.com/users/mikeperry-tor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikeperry-tor/subscriptions","organizations_url":"https://api.github.com/users/mikeperry-tor/orgs","repos_url":"https://api.github.com/users/mikeperry-tor/repos","events_url":"https://api.github.com/users/mikeperry-tor/events{/privacy}","received_events_url":"https://api.github.com/users/mikeperry-tor/received_events","type":"User","site_admin":false},"created_at":"2018-08-01T21:51:18Z","updated_at":"2018-08-01T21:51:18Z","author_association":"OWNER","body":"Ok this is implemented. I will continue to test with my test service and then email Florentin (possibly after tagging v0.2.0)."}}
{"actor":{"display_login":"mikeperry-tor"}}