3 ms·

The request is going over tor-- do timing attacks work with that? When I browse with tor my connection is so slow that I don't think I could get good data for

• sp332 12y ago
  Only mentioned in passing, but: Third, we have already accepted that our design is vulnerable to end-to-end timing attacks https://blog.torproject.org/blog/one-cell-enough https://blog.torproject.org/blog/one-cell-enough It doesn't matter if your connection is slow, all that matters is that latency is fairly consistent during the attack. You can use statistics to extract high-confidence data even from noisy signals, if you run the attack long enough to get lots of timing data.
  • bhitov 12y ago
    > Third, we have already accepted that our design is vulnerable to end-to-end timing attacks https://blog.torproject.org/blog/one-cell-enough https://blog.torproject.org/blog/one-cell-enough They are not talking about the same kind of timing attacks. Deanonymization attacks require vastly less latency consistency.
    • sp332 12y ago
      Oh, I see! Thanks for the context.