[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Off-Path TCP Exploits: Global Rate Limit Considered Dangerous,

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] Off-Path TCP Exploits: Global Rate Limit Considered Dangerous,
From: Cristian Consonni <kikkocristian@xxxxxxxxx>
Date: Sun, 14 Aug 2016 00:40:35 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sat, 13 Aug 2016 18:41:15 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-transfer-encoding; bh=X/c0BUdyHdLsndYHKbb53JO6Y6i3CBVEmBBTh8ny6e0=; b=CnxUwjcYicHP7tjPSCysWyHqLLCR2ienvZ5A9Zj1tp4vWoEmocx10IFeUlm1WSpqkh ckuFCBqHuFhtZTQ1hcgGAmqSP95stXY9+948whIdLG/BxozWc9/bVK+K8WuA6iPozjy9 w9F54YlkYlBB4KeYII3v/FLoxujOOfuDf8cVLXtaXPYP0fiTO3FAcPTsBaYIRmvsvQPb Hn9YMhVgOCNdF9J3uMxu3Ou7dOPHVynC84kdS0xn1TVgNMSR5s1SgzpHpfNQ0KmkFjvH E9/MUaIDBLz/BbqIPd1JqPQLNP3ejrp7KjTMNACT1LCKWmWZuQooth0VKwl0jggISuTk J7zg==
In-reply-to: <7abb44b1-b6cb-3989-c54f-00f641b8e067@mailbox.org>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <7abb44b1-b6cb-3989-c54f-00f641b8e067@mailbox.org>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>

2016-08-10 14:20 GMT+02:00 fatal <fatal@xxxxxxxxxxx>:
> "[...] Such a weakness could be used to launch targeted attacks that
> track users’ online activity, forcibly terminate a communication, hijack
> a conversation between hosts or degrade the privacy guarantee by
> anonymity networks such as Tor.[...]"

Temporary workaround (source: https://ucrtoday.ucr.edu/39030):
1. Open /etc/sysctl.conf, append a command
“net.ipv4.tcp_challenge_ack_limit = 999999999”.
2. Use “sysctl -p” to update the configuration.

C
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Off-Path TCP Exploits: Global Rate Limit Considered Dangerous,
  - From: Patrick Schleizer

References:
- [tor-talk] Off-Path TCP Exploits: Global Rate Limit Considered Dangerous,
  - From: fatal

Prev by Author: Re: [tor-talk] Am I successfully using Torsocks, SSH, and a VPS? Please advise, thanks!
Next by Author: Re: [tor-talk] List messages marked as spam by gmail
Previous by thread: [tor-talk] Off-Path TCP Exploits: Global Rate Limit Considered Dangerous,
Next by thread: Re: [tor-talk] Off-Path TCP Exploits: Global Rate Limit Considered Dangerous,
Index(es):
- Author
- Thread