Seems like more research needs to go into preventing traffic confirmation attacks: https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-co

Seems like more research needs to go into preventing traffic confirmation attacks: https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack/ https://blog.torproject.org/blog/tor-security-advisory-relay... "A traffic confirmation attack is possible when the attacker controls or observes the relays on both ends of a Tor circuit and then compares traffic timing, volume, or other characteristics to conclude that the two relays are indeed on the same circuit. If the first relay in the circuit (called the "entry guard") knows the IP address of the user, and the last relay in the circuit knows the resource or destination she is accessing, then together they can deanonymize her." Interesting technical problem. They patched it, obviously, but similar attacks are still possible. It does say more research needs to be done, when that post was published. Obviously the method they used to send and receive signals from one side to the other doesn't work anymore, but statistical methods presumably do. Sort of like this: https://mice.cs.columbia.edu/getTechreport.php?techreportID=556&format=pdf https://mice.cs.columbia.edu/getTechreport.php?techreportID=... Seems like a very difficult problem to solve.