[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: same first hops

To: or-talk@xxxxxxxxxxxxx
Subject: Re: same first hops
From: "F. Fox" <kitsune.or@xxxxxxxxx>
Date: Wed, 08 Oct 2008 20:50:28 -0700
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Wed, 08 Oct 2008 23:50:37 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :x-enigmail-version:content-type:content-transfer-encoding; bh=EgXtNxZaGjI57CSuBqv5I1FAzQPIGlXzRZ0e3yUACc0=; b=mIrEvWKi+6ewklICj0ZqtBNHD4kdyKdfinUmFHsQ1ZOZwoDQhCHCz5LeIBARz+9a+u HO5ENUBW0plAnk2QGhJVcKZf/X2Xjs+7+bfsEVOSi//nU7V+KFqxiPeP2c5jMOHg09KF QKVv8YvxFgp9Dg8rGOosUjosUeHECaOX83Uys=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:x-enigmail-version:content-type :content-transfer-encoding; b=AhCzBdtg1PJHgwsoFAIkMAzcLbxl8B1zgLVGK/6/KbXX+5yh8w1MGNrTRvVbDvm3qB SGfxA8at7M/F7erYzGJJwGqI/6Gzx2zFQNg/6A3pdmwnvgs9ewO+596CuRYK+BbDxHdz VoumgFFzwtpBjnE/5pQYd9NWCGjhxnSCG5VH8=
In-reply-to: <e51d72d90810082023h498a70cep91543f04776595f1@xxxxxxxxxxxxxx>
References: <e51d72d90810081350j739c97denbbb993a6f6384908@xxxxxxxxxxxxxx> <48ED2305.5080001@xxxxxxxxx> <e51d72d90810082023h498a70cep91543f04776595f1@xxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: Mozilla-Thunderbird 2.0.0.16 (X11/20080724)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

M wrote:
> Thanx Gregory  and F.Fox...understood the concept. Just one note though:
>  
> "Tor (like all current practical low-latency anonymity designs) fails
> when the attacker can see both ends of the communications channel. For
> example, suppose the attacker is watching the Tor relay you choose to
> enter the network, and is also watching the website you visit."
>  
> When it says "watching" does it mean? I thought the info was encrypted
> (except the last hop) and the IP invisible? Does it mean timing attacks?
(snip)

Yes, it's referring to end-to-end attacks - which are usually timing
attacks; however, fingerprinting attacks (based on the total filesizes
of known target downloads, since encryption doesn't change the size of
data) are possible in theory, as well.

- --
F. Fox
Owner of Tor node "kitsune"
http://fenrisfox.livejournal.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=LHKE
-----END PGP SIGNATURE-----

References:
- same first hops
  - From: M
- Re: same first hops
  - From: F. Fox
- Re: same first hops
  - From: M

Prev by Author: Re: same first hops
Next by Author: Re: Interesting tor network map.
Previous by thread: Re: same first hops
Next by thread: Re: same first hops
Index(es):
- Author
- Thread