4 ms·
What I don't fully understand is why it's necessary for an adversary to have access to all nodes on the complete path from his DDoS machine to the target IP he'
by nickysielicki 12y ago
What I don't fully understand is why it's necessary for an adversary to have access to all nodes on the complete path from his DDoS machine to the target IP he's trying to unmask.
Wouldn't it only be necessary that I have shared knowledge of what packet I'm sending between the machine that I'm sending my DDoS from and my relay which I'm hoping is the last one that my target is connecting to? Or perhaps I don't understand Tor well enough.
- aosmith 12y agoTor works by obfuscating traffic, jumping through 3 or more nodes before exiting the tor network. If an attacker controls those three nodes it is possible for them to determine the source.
- redthrowaway 12y agoYou're not going to know the contents of the packet unless you also control the machine in the previous hop.
- IshKebab 12y agoYou can use a timing attack.
- kryptiskt 12y agoYou might be able to use statistics instead. If you flood Tor with requests for a particular service, that service's address should become more common at the relays you control.