7

I've heard it called "disbanding" attacks where the attacker induces a client into not routing a connection over Tor. Basically all of the things that the TBB protects against.

Examples might be leaking DNS because it's using SOCKS4 or using WebRTC to discover the private IP of the user.

Is there an existing list of all such attacks, or can you make a list off to top of your head?

  • 4
    I have been searching for more information on this for days and tonight I found something you might find useful. torproject.org/projects/torbrowser/design/#proxy-obedience You mentioned DNS leaks and WebRTC, the link seems to provide a fairly comprehensive list of what the tor developers have done with Tor Browser to prevent this type of attack from being successful. Is this something like what you are looking for? – Joey Aug 13 '15 at 2:43
1

adding to the types you've mentioned there're two other kinds of them:

  • Zero-Day exploits Tor browser is a Firefox by roots, so some Firefox zero-day exploits are affecting it too. It's OK for any software to have mistakes - it's written by people, people do mistakes.
  • External container Using things that are inside the browser is safe in case of Tor browser or other ones - they will use proxies configured. However calling some external components like Adobe Flash will cause a separated execution container being created by OS - and it can just ignore the proxy settings and try to make a direct request and leak data.

protected by Community May 28 '16 at 10:59

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.