[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] How easy are Tor hidden services to locate?

Juan Garofalo <juan.g71@xxxxxxxxx> wrote:

> Roger wrote:
> >Hidden services are definitely weaker than regular Tor circuits, a)
> >because the adversary can induce them to speak,
>         Care to elaborate on that? You mean timing attacks (based on the
> fact that hidden servers 'speak' to clients?) ? Or the owner of the service
> leaking information about himself by mistake? Or?

  If a given service allows uploads, for example, it's frequently possible
to then upload something to broadcast the server address.  But if a server
is unpatched, or someone has some Apache 0day they've been saving up, it's
pretty easy to determine the location that way as well.

tor-talk mailing list