3 ms·

Tor isn't safe from state-level attackers, as demonstrated by the Sybil attack launched by Carnegie Mellon the other year.

• omginternets 10y ago
  Do you have a link to the paper? "Sybil attack" is a rather large category of attacks and I'm curious about the specifics of this particular one. In particular, certain vulnerabilities can still be prohibitively expensive for use in dragnet-surveillance.
  • saycheese 10y ago
    It was never released: http://motherboard.vice.com/read/carnegie-mellon-university-attacked-tor-was-subpoenaed-by-feds http://motherboard.vice.com/read/carnegie-mellon-university-...
    • omginternets 10y ago
      Interesting and concerning. Thanks.
      • baseio 10y ago
        It's not concerning. The flaw was 1) only about hidden services, 2) was patched the next day it was released 3) The Tor Project have been doing some extraordinary work on creating a stronger and secure onion service infrastructure which will be deployed by hopefully mid-2017.
        • omginternets 10y ago
          It's concerning that the paper was never released.