Re: [tor-dev] Draft Proposal for BridgeDB IPv6 Support

[Ralf-Philipp Weinmann <ralf@xxxxxxxxxxxxxx>]

On Dec 10, 2011, at 4:07 PM, Robert Ransom wrote:

> On 2011-12-06, Aaron <aagbsn@xxxxxxxx> wrote:
> 
>>        How does IPv6 affect address datamining of https distribution?
>>          A user may be allocated a /128, or a /64.
>>          An adversary may control a /32 or perhaps larger
>>          Proposal: Enable reCAPTCHA support by default.
> 
> How much would it cost China to have 1000 (or even 10000) CAPTCHAs
> solved?  How much of our bridge pool would such an attack obtain?


Apparently prices are as low as USD 2.00 for 1000 CAPTCHAs (solved by humans): 

http://decaptcher.com

Assuming those prices, it's cheaper to deplete Tor's bridge pool than going out on a night in the town…

Cheers,
Ralf
_______________________________________________
tor-dev mailing list
tor-dev@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev