Re: [tor-talk] How easy are Tor hidden services to locate?

[Griffin Boyce <griffinboyce@xxxxxxxxx>]

Juan Garofalo <juan.g71@xxxxxxxxx> wrote:

> Roger wrote:
>
> >Hidden services are definitely weaker than regular Tor circuits, a)
> >because the adversary can induce them to speak,
>
>         Care to elaborate on that? You mean timing attacks (based on the
> fact that hidden servers 'speak' to clients?) ? Or the owner of the service
> leaking information about himself by mistake? Or?


  If a given service allows uploads, for example, it's frequently possible
to then upload something to broadcast the server address.  But if a server
is unpatched, or someone has some Apache 0day they've been saving up, it's
pretty easy to determine the location that way as well.

~Griffin
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk