3 ms·
It sounds like running the server on a heavily un-trusted and sandboxed machine would prevent this class of attacks, right? I mean a machine set up so that eve
by praptak 12y ago
It sounds like running the server on a heavily un-trusted and sandboxed machine would prevent this class of attacks, right?
I mean a machine set up so that even if attacker gets root, they can still only send Tor traffic.
- xorcist 12y agoThat is also not surprisingly best practice, according to the Tor documentation. You shouldn't trust it completely since there are always escapes from virtual environments but there's no reason not to.
- dublinben 12y agoBest practices would include a setup like Whonix with a gateway machine that only allows Tor connections by your protected machine.
- mirimir 12y agoBut this would not have helped against the attack described here: https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack https://blog.torproject.org/blog/tor-security-advisory-relay... Once a malicious relay becomes an entry guard for a hidden service, it's game over.