4 ms·
What are the odds of that request being routed exclusively through those specific nodes ? I mean he either tried for a long time or had a very long list of nod
by jokoon 12y ago
What are the odds of that request being routed exclusively through those specific nodes ?
I mean he either tried for a long time or had a very long list of nodes... I don't even know what's the average number of middle node for one route.
- aosmith 12y agoI think there's a chance of using malformed packets to disrupt all other nodes.
- nickysielicki 12y agoWhat I don't fully understand is why it's necessary for an adversary to have access to all nodes on the complete path from his DDoS machine to the target IP he's trying to unmask. Wouldn't it only be necessary that I have shared knowledge of what packet I'm sending between the machine that I'm sending my DDoS from and my relay which I'm hoping is the last one that my target is connecting to? Or perhaps I don't understand Tor well enough.
- aosmith 12y agoTor works by obfuscating traffic, jumping through 3 or more nodes before exiting the tor network. If an attacker controls those three nodes it is possible for them to determine the source.
- redthrowaway 12y agoYou're not going to know the contents of the packet unless you also control the machine in the previous hop.
- IshKebab 12y agoYou can use a timing attack.
- kryptiskt 12y agoYou might be able to use statistics instead. If you flood Tor with requests for a particular service, that service's address should become more common at the relays you control.