3 ms·
Any chance this could be a state-sponsored attack aimed at correlating traffic?
by omginternets 10y ago
Any chance this could be a state-sponsored attack aimed at correlating traffic?
- Cyph0n 10y agoThis is probably the case. I don't think that there's any indication that UAE users are starting to use Tor en masse.
- lab89 10y agoMy guess is that this is a state sponsored attack that uses HTTP Injection at the ISP level to hack as much users as possible, and the C&C is most probably a hidden service that's why they also deployed Tor.
- noobermin 10y agoWouldn't a state-sponsored entity be smarter than routing all their traffic through UAE such that it could receive attention on HN? I like the botnet explanation better.
- omginternets 10y agoI don't know, but I find that expediency is usually a very real concern in such operations so it seems plausible for the UAE to cut corners and route traffic in a convenient (though not covert) manner. Moreover, they may wish to route traffic through nodes they control. I understand your point, but then again, I don't see why a botnet would route it's traffic through the UAE either.
- libeclipse 10y agoIt may be a botnet that's targeting users in the UAE, and therefore connecting to the tor network from there.
- deleted 10y ago[deleted]