Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

To: or-talk@xxxxxxxxxxxxx

Subject: Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

From: Damian Johnson <atagar1@xxxxxxxxx>

Date: Thu, 20 May 2010 07:06:13 -0700

Delivered-to: archiver@xxxxxxxx

Delivered-to: or-talk-outgoing@xxxxxxxx

Delivered-to: or-talk@xxxxxxxx

Delivery-date: Thu, 20 May 2010 10:06:28 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type; bh=rw9dZy6vxaOmasoA2I2/WPWH3uG8J1yvRipsJUM4M7o=; b=dlla+VMEvK15PPwXTR6AIcJ8IgsDlSMBSi+Vn/8CQQ5d0r57DImdIZPv8l73312XTy YdNL65QbsYnk93oxIt77zYyCWb6JNh+ZN5XIGAn2ANAITgAP/+leJCOHcq3vdYTRj+6L SRVI5IyggdczuQ11fwalnF7Y1ta7sb8AcFPWQ=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=QB9sQONpERCrp3z9kq41BpinOwXEcvqQpm9Uaq79TcxgDZ/QTXWbGgEzh/DvYEv5Fz 4b6EXjfsZVJ1AwE0HncOhIGwVvwT1hl94K13U4ZfJoKuPL/TfEBNeyHffCwN7I0aLadZ /aCvdirMede1agl3uPOND2vGdPCY3lvwPeZ7s=

In-reply-to: <AANLkTilvgvvCNxfSBdg5sVfuoWhtwJAo1ZRXLZbsOZvo@xxxxxxxxxxxxxx>

References: <201005200629.o4K6TSQe028556@xxxxxxxxxxxxx> <AANLkTilvgvvCNxfSBdg5sVfuoWhtwJAo1ZRXLZbsOZvo@xxxxxxxxxxxxxx>

Reply-to: or-talk@xxxxxxxxxxxxx

Sender: owner-or-talk@xxxxxxxxxxxxx

On Thu, May 20, 2010 at 7:03 AM, Damian Johnson <atagar1@xxxxxxxxx> wrote:

The trick is that both parties need to list each other as family for this to work. As per the man page..

"When two servers both declare that they are in the same 'family'..."

The attacker would need to be listed in every other relay's torrc for the attack you described to work. I'm pretty sure listing relays you don't control has no effect. -Damian

On Wed, May 19, 2010 at 11:29 PM, Scott Bennett <bennett@xxxxxxxxxx> wrote:

On Thu, 20 May 2010 08:23:34 +0200 (CEST) "Sebastian Hahn"
<mail@xxxxxxxxxxxxxxxxx> wrote:
>> All that would do would be to say to all clients, "Don't include
>> this node in the same circuit as any of the blutmagie nodes." How would
>> that be an attack?
>
>I can list all the nodes I don't control...
>

What is the limit on line length for such a MyFamily statement? What
is the limit on descriptor length? Listing ~1500 nodes sounds like the
sort of thing that wouldn't work very well.
Also, my other question remains: what would stop me from listing nodes
that I don't control in a MyFamily statement now?

Scott Bennett, Comm. ASMELG, CFIAG
**********************************************************************
* Internet: bennett at cs.niu.edu *
*--------------------------------------------------------------------*
* "A well regulated and disciplined militia, is at all times a good *
* objection to the introduction of that bane of all free governments *
* -- a standing army." *
* -- Gov. John Hancock, New York Journal, 28 January 1790 *
**********************************************************************
***********************************************************************

To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk in the body. http://archives.seul.org/or/talk/