Skip to main content
Tweeted twitter.com/#!/StackTor/status/524488130007941120
edited title
Link
Roya
  • 3.2k
  • 3
  • 18
  • 40

Which one of the relay nodes need to get compromizedcompromised for client de-anonymization?

deleted 9 characters in body
Source Link
Roya
  • 3.2k
  • 3
  • 18
  • 40

Tor can't protect against traffic confirmation (also known as end-to-end correlation), where an attacker tries to confirm an hypothesis by monitoring the right locations in the network and then doing the math. The question is: Is it enough for the adversary to compromise any two of the three nodes to be able to de-anonymize the client? Specifically consider the following:

Guard (compromised) + Middle node (compromised) + Exit node (not compromised) = Result in Client de-anonymized

Guard (compromised) + Middle node (not compromised) + Exit node (compromised) = Result in Client de-anonymized

Guard (not compromised) + Middle node (compromised) + Exit node (compromised) = Result in Client de-anonymized

Do all three cases detailed above result in client de-anonymization? and How?

Tor can't protect against traffic confirmation (also known as end-to-end correlation), where an attacker tries to confirm an hypothesis by monitoring the right locations in the network and then doing the math. The question is: Is it enough for the adversary to compromise any two of the three nodes to be able to de-anonymize the client? Specifically consider the following:

Guard (compromised) + Middle node (compromised) + Exit node (not compromised) = Result in Client de-anonymized

Guard (compromised) + Middle node (not compromised) + Exit node (compromised) = Result in Client de-anonymized

Guard (not compromised) + Middle node (compromised) + Exit node (compromised) = Result in Client de-anonymized

Do all three cases detailed above result in client de-anonymization? and How?

Tor can't protect against traffic confirmation (also known as end-to-end correlation), where an attacker tries to confirm an hypothesis by monitoring the right locations in the network and then doing the math. The question is: Is it enough for the adversary to compromise any two of the three nodes to be able to de-anonymize the client? Specifically consider the following:

Guard (compromised) + Middle node (compromised) + Exit node (not compromised) = Result in Client de-anonymized

Guard (compromised) + Middle node (not compromised) + Exit node (compromised) = Result in Client de-anonymized

Guard (not compromised) + Middle node (compromised) + Exit node (compromised) = Result in Client de-anonymized

Do all three cases detailed above result in client de-anonymization?

Source Link
Roya
  • 3.2k
  • 3
  • 18
  • 40

Which one of the relay nodes need to get compromized for client de-anonymization?

Tor can't protect against traffic confirmation (also known as end-to-end correlation), where an attacker tries to confirm an hypothesis by monitoring the right locations in the network and then doing the math. The question is: Is it enough for the adversary to compromise any two of the three nodes to be able to de-anonymize the client? Specifically consider the following:

Guard (compromised) + Middle node (compromised) + Exit node (not compromised) = Result in Client de-anonymized

Guard (compromised) + Middle node (not compromised) + Exit node (compromised) = Result in Client de-anonymized

Guard (not compromised) + Middle node (compromised) + Exit node (compromised) = Result in Client de-anonymized

Do all three cases detailed above result in client de-anonymization? and How?