3 ms·
No, you just need to observe the timings, and only of the first and last segments of the communication Western nations will probably have access to them in mos
by g-b-r 2y ago
No, you just need to observe the timings, and only of the first and last segments of the communication
Western nations will probably have access to them in most cases, at least for traffic originating and ending in one of them
- ddtaylor 2y agoThat's not deep packet inspection, just FYI. Timing and traffic correlation attacks never get any access to the packet information and piggy back on existing network weaknesses (correlating IP addresses based on timing metadata)
- g-b-r 2y agoYeah, but there's no need of "knowing all the variables in the system" and there's no "last time something like that was possible", it's always been possible. And you get the "packet information" out of the exit nodes...
- roywiggins 2y agoDPI usually refers to actually poking around the contents of the packets, which in TOR are (hopefully) minimally informative. With timing attacks you just keep track of the volume.
- g-b-r 2y agoWhy is DPI still being brought up? And what was wrong in my message? With timing you keep track of the volume and... timing, which (often) allows you to correlate the entering and exiting traffic...