Want to help moderate this community? We need more candidates in the ongoing election!

Questions tagged [attacks]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
9
votes
1answer
298 views

Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?

Assume someone wants to disrupt the Tor network or maybe bring it down. A powerful attacker could try to DDoS all the directory authorities. As there are only 10 worldwide this seems like an easy task....
10
votes
1answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
8
votes
3answers
3k views

How to tell my Tor Browser to use a certain relay as entry point?

I am running a Tor relay on a remote server that is hosted in a professional server farm about 1000 km away from my home. I am absolutely sure, that this Tor relay is secure because I am root on this ...
4
votes
2answers
800 views

How can Tor users and Tor Network protect themselves from an exit node that is actively logging or manipulating exit traffic?

Tor Exit nodes are the last hop in the circuit a Tor client establishes to reach a service in the Internet. Exit nodes handle the actual traffic of the client, either it's encrypted or not. That ...
3
votes
2answers
65 views

Is exit node able to modify / add packets to a stream?

Is it possible for an exit node to modify the data stream of a circuit, for example could a cell such as a padding cell be send down the stream after the data have been transmitted ? I am thinking ...
3
votes
1answer
1k views

Launching a Distributed Denial of Service attack on a hidden service

Recently, I have seen more and more forums, image boards, and market places that are shifting to Tor for the safety of their users. This undoubtedly brings the many attackers that dislike these ...
1
vote
2answers
184 views

What would happen if directory authorities were compromised or taken down?

If many directory authorities are compromised or offline, is it still safe to use Tor? What are security and anonymity consequences for Tor users of such an attack on directory authorities?
9
votes
4answers
2k views

Is there a way to defend oneself against a timing attack?

Is there a way for an end user to protect oneself against the timing attack when using Tor? For those, who are not familiar with it, a timing attack involves an adversary populating the Tor cloud ...
7
votes
3answers
3k views

Where is the Tor API documentation?

I want to have a program I'm writing interact with the Internet exclusively through Tor. After perusing the Tor project's documentation it appears that they do not specify the API anywhere i.e. how a ...
3
votes
1answer
305 views

If all network traffic is being monitored, will Tor still be effective at anonymization?

During a panel at the 2014 SXSW conference, Julian Assange (founder of Wikileaks) stated "The ability to surveil everyone on the planet is almost there and, arguably, will be there in the next couple ...
3
votes
0answers
278 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
2
votes
0answers
71 views

What kinds of attack can a bridge carry out?

I have been recently doing some research on anonymity implications of using a bridge, and wrote a tool (not very well written though) for setting up a malicious bridge node. However, I am not clear ...
1
vote
1answer
102 views

How do bridges defend themselves against targeted scans?

Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required. Assuming someone runs obfs4 and a ...