Questions tagged [attacks]

The tag has no usage guidance.

18 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
66 views

Tor hiden service ratelimits

While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
4
votes
1answer
184 views

Can Tor be relied on as a trustless service? And more

My question is going to be a bit amateurish (bear with me please) but I have read a fair bit of this: https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt [1] And it didn't answer it. My ...
3
votes
0answers
382 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
2
votes
0answers
112 views

What kinds of attack can a bridge carry out?

I have been recently doing some research on anonymity implications of using a bridge, and wrote a tool (not very well written though) for setting up a malicious bridge node. However, I am not clear ...
1
vote
1answer
69 views

Could I avoid traffic confirmation attacks by setting up my own guard node?

If I set up my own guard node and always use it when connecting through the Tor network, would I be fully protected from confirmation attacks? Also, how would my anonymity be affected with such a ...
1
vote
1answer
236 views

is tor still vulnerable to replay attack?

I'm doing a project to my University that consist studiyng vulnerabilities on TOR network. One attack I came across on Intenet is the "replay attack". This type of attack allows a adversary, that ...
1
vote
1answer
158 views

Increasing number of middle relays weakens the anonymity?

Tor nodes build encrypted TLS sessions between neighbors to multiplex circuits of users. Multiplexing helps to anonymize users (?). With an increasing number of middle relays multiplexing becomes ...
1
vote
0answers
62 views

Noise sender function in TOR?

Does TOR have the service of contacting me with x bytes of noise and ignore the garbage I return? Background I recently heard a talk about a company that is privacy aware. They run smart ...
1
vote
0answers
64 views

Can someone explain this?

Can someone please explain this? still unfamiliar i mean this ip's looks suspicious is this a ddos attack?m new to relay operating so please explain thank you.
1
vote
0answers
72 views

Tor Brower Compromised?

My firewall is configured to warn me of any changes to my tor browser when I'm on line. It also lists the ip address and the originating website. Recently, it detected a change which was initiated ...
1
vote
0answers
184 views

How does selecting new guard relays work?

I've been told guards are selected when a client first connects to the Tor network and used until they disappear. What constitutes disappearing? Do all guards need to disappear (and then the whole ...
1
vote
1answer
323 views

Hidden Service as client or relay?

Take a look, what is the difference between Tor-Browser in onion encrypted traffic and Apache service responses in onion encrypted traffic? Tor-Browser: sent 1% / receive 99%. It is simply, ...
1
vote
0answers
60 views

Is it possible to perform a timing/correlation attack for a stream which sends only 3 packets?

I'd like to know if it is possible to perform a timing/correlation attack on a Communication which uses Tor, if the communication is done in 3 packets. I am reffering to passive corelation attacks, ...
0
votes
0answers
35 views

Disconnect after X minutes inactivity?

I read somewhere its not a good idea to remain connected to TOR network for long periods of time because it gives an attackers more opportunity to de-anonymize. The machine I am using is unatttended ...
0
votes
0answers
139 views

Track Tor circuit via ISP logs

I have some question about the very basics of tor, as this keeps bugging me now for some time: As far as I know every tor node is only aware of the ip address of the following node. For example the ...
0
votes
1answer
188 views

Simulating Correlation attacks on Tor using Shadow

Is it possible to simulate correlation attacks on Tor using Shadow? If it's possible what's the easiest way to implement it? If it's not possible, then is there any other simulators that can be used ...
0
votes
1answer
885 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
-1
votes
1answer
1k views

Stopping a DDoS attack on Tor daemon

I've already check How to protect a hidden service against DDOS attack? and How to deal with DDOS attacks? and How to mitigate layer 7 attacks on hidden services?. The problem is not DDoS of web ...