Re: [tor-talk] SocksPort: Circuit isolation is not Exit isolation

[Jacob Appelbaum <jacob@xxxxxxxxxxxxx>]

Nick Mathewson:
> On Mon, Sep 10, 2012 at 10:28 PM, grarpamp <grarpamp@xxxxxxxxx> wrote:
>> The typical use case is wanting to use multiple accounts on the
>> same site at once, with a guarantee that you're not appearing to
>> be from the same exit and thus are not as easily linked.
>>
> 
> This doesn't make sense to me.  If you've got two requests open from
> the same exit to the same site, using different accounts, then all the
> site can tell is that two Tor users (or maybe one) are connecting to
> it.  That's also the same conclusion it could reach if the two
> requests were coming from the same exit
> 

The key is that a user alice, only signs on when bob also signs on and
always from the same IP. Sooner or later, one might guess that alice is
bob. Obviously, one could easily draw the same conclusion with an
intersection of logged in users or similar data, regardless of IP address.

All the best,
Jake
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk