5 ms·
You don’t need all the middle nodes. Just the entry and exit, and enough data to do packet timing analysis to correlate them. It’s in fact shockingly easy for a
by dumbo-octopus 2y ago
You don’t need all the middle nodes. Just the entry and exit, and enough data to do packet timing analysis to correlate them. It’s in fact shockingly easy for a well provisioned actor to trace tor traffic, and this is something the TOR project openly admits.
They’re financed by the US Government after all…
- basedrum 2y agoTor does have padding defenses to protect against that. Also, according to their latest blog post on their finances, while it is true they have money from the US Government, that was only ~50% of their income (I think that was 2023). For the FUD part of that comment, see the "U.S. Government Support" section of https://blog.torproject.org/transparency-openness-and-our-2021-and-2022-financials/ https://blog.torproject.org/transparency-openness-and-our-20...
- dumbo-octopus 2y ago“Only half” is hilarious. Thanks for that. And if you trust the NSA can’t overcome correlation in the presence of “padding defenses”, then sure: TOR is secure.
- 867-5309 2y agoI wonder how many tor users actually know this. tor would probably not exist in the same capacity without that funding
- tru3_power 2y agoSounds like https://arxiv.org/abs/1808.07285 https://arxiv.org/abs/1808.07285
- alphan0n 2y agoOnion sites do not utilize an exit node.
- dumbo-octopus 2y agoThere is a node that delivers your packet to the target server, is there not?
- alphan0n 2y agoIf the server is on the Tor network, an onion server, then it is encrypted end to end and no traffic or identity is exposed to either the onion server or any intermediary. That is to say, if I started an onion server on one side of the world, then connected to it from somewhere else, my connection to it would be anonymous and encrypted to any external entity.
- dumbo-octopus 2y agoHow are you imagining the penultimate node in the chain connects to the target server without knowing anything about them?
- alphan0n 2y agoThis is well understood public knowledge. https://community.torproject.org/onion-services/overview/ https://community.torproject.org/onion-services/overview/
- dumbo-octopus 2y agoHook, line, and sinker. https://www.sciencedirect.com/science/article/pii/S2667295222000514 https://www.sciencedirect.com/science/article/pii/S266729522... https://www.usenix.org/system/files/raid2019-iacovazzi.pdf https://www.usenix.org/system/files/raid2019-iacovazzi.pdf https://www.ndss-symposium.org/ndss-paper/flow-correlation-attacks-on-tor-onion-service-sessions-with-sliding-subset-sum/ https://www.ndss-symposium.org/ndss-paper/flow-correlation-a...
- alphan0n 2y ago