1

I've been told guards are selected when a client first connects to the Tor network and used until they disappear.

What constitutes disappearing?
Do all guards need to disappear (and then the whole set is replaced) or just one (and only that one is replaced)?

Would it be possible to get selected as a target's guard by DoS'ing random guards until you get chosen?

Improve this question
5
  • Where were you told guards are used until they "disappear", this isn't true? And yes, it's possible to denial of service a guard as a discovery mechanism. It's known as the "Sniper Attack". – cacahuatl Jan 7 '17 at 7:33
  • 1
    tor.stackexchange.com/questions/10610/… this answers guard rotation, the sniper attack is also covered elsewhere too. – cacahuatl Jan 8 '17 at 1:50
  • Well I wasn't "told" exactly, I heard it in a talk. Roger Dingledine said it at 11:30 of his Defcon 16 talk: Security and Anonymity Vulnerabilities in Tor: Past, Present, Future media.torproject.org/video/… The exact quote is ``The idea is every client picks 3 or 4 entry nodes. Three or four Tor servers as her first hop always and she sticks with those 3 or 4 until they disappear'' – user194 Jan 8 '17 at 1:55
  • 1
    Ah, defcon 16 is quite some time ago. See the other answer I linked above for what guard rotation looks like more recently, and my answer to a question about guard lifetimes here: tor.stackexchange.com/questions/13328/… – cacahuatl Jan 8 '17 at 1:57
  • Thanks, that looks like it might contain the information I need – user194 Jan 8 '17 at 2:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy