Want to help moderate this community? We need more candidates in the ongoing election!

Questions tagged [attacks]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
10
votes
1answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
9
votes
4answers
2k views

Is there a way to defend oneself against a timing attack?

Is there a way for an end user to protect oneself against the timing attack when using Tor? For those, who are not familiar with it, a timing attack involves an adversary populating the Tor cloud ...
9
votes
1answer
298 views

Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?

Assume someone wants to disrupt the Tor network or maybe bring it down. A powerful attacker could try to DDoS all the directory authorities. As there are only 10 worldwide this seems like an easy task....
9
votes
1answer
78 views

Can intermediary nodes learn the length of a circuit?

This should be impossible because of the layered encryption, but some documentation suggests that this can somehow be done. From Section 5.6 [1] of tor's specification When speaking v2 of the link ...
8
votes
6answers
700 views

Releasing a controversial movie torrent using Tor Network for security

I live in a dictatorship and use the Tor Network to get around censorship. I read that Torrenting over Tor Network is not good because of high Internet usage and it slows everything down. For a short ...
8
votes
3answers
3k views

How to tell my Tor Browser to use a certain relay as entry point?

I am running a Tor relay on a remote server that is hosted in a professional server farm about 1000 km away from my home. I am absolutely sure, that this Tor relay is secure because I am root on this ...
8
votes
2answers
412 views

Tor dying on Raspberry Pi (circuit creation storm, out of memory)

UPD: this question was regarding an older version of Tor (0.2.4.24). With a newer version (which was 0.2.7.2-alpha for me) the problem disappeared. I am running Tor (0.2.4.24) relay on Raspberry Pi (...
7
votes
3answers
3k views

Where is the Tor API documentation?

I want to have a program I'm writing interact with the Internet exclusively through Tor. After perusing the Tor project's documentation it appears that they do not specify the API anywhere i.e. how a ...
7
votes
1answer
333 views

List of attacks that try to trick browser to not use SOCKS/Tor

I've heard it called "disbanding" attacks where the attacker induces a client into not routing a connection over Tor. Basically all of the things that the TBB protects against. Examples might be ...
5
votes
4answers
2k views

How safe are Tor users?

Given that Silk Road was just shut down, an article was published stating that: Tor Can't Always Keep You Safe; Just Ask Silk Road ... careful traffic monitoring and a little math you can figure ...
5
votes
2answers
291 views

Does Tor team have plans to implement post-quantum asymmetrical encryption schemes?

There is information that NSA is building quantum computer. Since it would make it possible to crack RSA using Shor's algorithm and we unlikely to know if they will successfully build it and start ...
5
votes
1answer
100 views

Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?

Assume an attacker with a record of Tor traffic between a client and guard has precomputed the 1024-bit Oakley group for Diffie-Hellman used in the TAP protocol. This would allow them to rapidly ...
4
votes
2answers
798 views

How can Tor users and Tor Network protect themselves from an exit node that is actively logging or manipulating exit traffic?

Tor Exit nodes are the last hop in the circuit a Tor client establishes to reach a service in the Internet. Exit nodes handle the actual traffic of the client, either it's encrypted or not. That ...
4
votes
1answer
467 views

Would Tor remain anonymous in a post-quantum future?

I'm writing a near-future sci-fi novel where general quantum computing has been developed and SSL has been replaced with a security protocol based on quantum key distribution (QKD). Tor would still be ...
4
votes
3answers
92 views

Multiple adversaries able to deploy large numbers of relays; do they dilute each other's effectiveness?

I note that when researchers analyse some particular types of attacks on Tor security, they assume a SINGLE adversary who is capable of deploying a significant number of relays that will eventually be ...
3
votes
2answers
328 views

What is identity correlation?

Can you describe please, what identity correlation is referring to? Why should I care? How can it be prevented?
3
votes
1answer
305 views

If all network traffic is being monitored, will Tor still be effective at anonymization?

During a panel at the 2014 SXSW conference, Julian Assange (founder of Wikileaks) stated "The ability to surveil everyone on the planet is almost there and, arguably, will be there in the next couple ...
3
votes
1answer
198 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
3
votes
1answer
784 views

How does Tor defend against Sybil attacks?

Sybil attacks target the weaknesses in the reputation system. How does Tor deal with such attacks? Recently, the Lizard Squad tried to take control of the Tor network by creating a large number of ...
3
votes
2answers
65 views

Is exit node able to modify / add packets to a stream?

Is it possible for an exit node to modify the data stream of a circuit, for example could a cell such as a padding cell be send down the stream after the data have been transmitted ? I am thinking ...
3
votes
1answer
1k views

Launching a Distributed Denial of Service attack on a hidden service

Recently, I have seen more and more forums, image boards, and market places that are shifting to Tor for the safety of their users. This undoubtedly brings the many attackers that dislike these ...
3
votes
1answer
536 views

How to prevent a rogue Tor entry node?

The Tor system works by connecting to a Tor node. That Tor node then connects to a deeper Tor node, which connects to a deeper Tor node, which connects to an exit node. How do I know that there's no ...
3
votes
1answer
724 views

Ready-made Tor relay on virtual machine

I was looking for a virtual machine that has Tor relay pre-configured. This came to my mind while thinking about the the amount of security which can be provided by having thousands of similar Tor ...
3
votes
1answer
473 views

How Guard Discovery attack in Tor network works?

How Guard Discovery attack works? What steps an attacker need to perform in order to discover the guard relay of the HS? How easy this attack can be realized in the real world? What are the ...
3
votes
0answers
276 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
2
votes
2answers
272 views

Is it safe to send identifying information unencrypted through Tor?

My question is similar to What's the extent of the problem of information leaking to exit node, but the answer there isn't sufficient for my question. If I send unencrypted information through ...
2
votes
1answer
88 views

What prevents directory server from being attacked?

I understand that the first thing a Tor user do is connect to a directory server to obtain a list of tor nodes, which can be found here: https://atlas.torproject.org/#search/flag:authority What ...
2
votes
2answers
370 views

Are low bandwidth DoS attacks performed over the Tor network a problem to be considered?

For low bandwidth and slow DoS / DDoS attacks (for example Slowloris, SlowLoris and PyLoris) the Tor network seems to be very useful medium. For free it offers two important things to the attacker: ...
2
votes
1answer
107 views

Whonix Workstation Country Code

Should I be concerned about the timezones in my custom whonix workstations (arch, ubuntu, kali)? Installation mediums always ask for my country code. I usually pick a random one. When building ...
2
votes
3answers
599 views

What happens when Tor always chooses the same path?

What weakness would this expose? It doesn't seem obvious that there would be any apparent way to attack.
2
votes
2answers
816 views

How can one avoid Tor correlation attacks?

People usually recommend either using a VPN or hosting an entry or exit node in a remote server. But what about proxies and bridges, for example? And are there any other way to avoid correlation ...
2
votes
1answer
420 views

Why do entry nodes not know the originator?

I stumbled upon the following text in the article about onion routing on Wikipedia: In this example onion, the source of the data sends the onion to Router A, which removes a layer of encryption ...
2
votes
2answers
4k views

Tor executable file location not found on startup and new file folders created in TBB directory not part of installation

Yesterday I tried to start TBB and got a message saying that the executable file could not be found. I clicked the link in Vidalia settings and it shows the the location for the exe file being in ...
2
votes
0answers
71 views

What kinds of attack can a bridge carry out?

I have been recently doing some research on anonymity implications of using a bridge, and wrote a tool (not very well written though) for setting up a malicious bridge node. However, I am not clear ...
2
votes
1answer
301 views

Why does TOR not intentionally choose nodes from different countries?

I've read than if an attacker could control both entry and exit node into the tor network he could easily de-anonymize TOR users. I have also read that TOR chooses nodes at random. So my question is ...
2
votes
0answers
22 views

Final relay able to encrypt data to the client? [duplicate]

Have been reading the one cell is enough to break anonymity paper, and just have a question. Once a circuit has been successfully created, can the final node of the circuit encrypt a piece of data ...
1
vote
2answers
1k views

What impact does Tor's bootstrapping process have for attack models?

As I understand it, Tor nodes and clients bootstrap themselves by contacting over the regular internet some hard-coded addresses to get basic network information. What are the effects of this design ...
1
vote
2answers
183 views

What would happen if directory authorities were compromised or taken down?

If many directory authorities are compromised or offline, is it still safe to use Tor? What are security and anonymity consequences for Tor users of such an attack on directory authorities?
1
vote
4answers
136 views

Relay streaming a large file

I wanted to download a file of considerable size, let us say 10GB and I sent the GET request to a web server to download that file. I then would get downloaded through the Tor network, through the ...
1
vote
2answers
117 views

On Dec 26 2014 the number of relays have increased from 6700 range to 10000 range overnight. What is going on?

The number of relays have suddenly increased from 6700 range to 10000 range in a very short period of time. What is going on?
1
vote
1answer
161 views

Is Tor network making any noise to confuse global adversaries?

Is Tor use any steganography methods to hide connections inside onion routing? I found this question on security SE: Tor traffic correlation attacks by global adversaries adversaries (like the NSA)...
1
vote
1answer
220 views

What events led to Freedom Hosting going down? [closed]

Freedom Hosting was one of the largest .onion website hosts until it suddenly started serving malicious code, and eventually went offline (presumably permanently). What was the sequence of events ...
1
vote
1answer
101 views

Are the LinkWidth attacks still a threat?

Recently i have found a pdf talking about an attack using so-called “LinkWidth” against tor network, here it is https://pdfs.semanticscholar.org/aa31/f6e8676e6c1a531854e4337649f0556e9280.pdf The ...
1
vote
1answer
58 views

Malicious Exit Nodes in network sensor [closed]

I run an onion pi (a wireless router that redirects all of my traffic over tor, here's a how to) Anyways I installed maltrail on my onion pi to see what's going on; found these exit nodes scanning my ...
1
vote
1answer
183 views

Security for relay on Home network

I want to host a relay to help out the network. I am looking into the possibility of doing it on my home network. Two concerns have come up during my research. The first is I would potentially be ...
1
vote
1answer
368 views

TOR traffic correlation: how quickly can you be de-anonymized?

I know that statistical analysis of the data entering and leaving the TOR network can be used to de-anonymise users given enough time. http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf How ...
1
vote
1answer
102 views

How do bridges defend themselves against targeted scans?

Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required. Assuming someone runs obfs4 and a ...
1
vote
2answers
74 views

Can the relay I connect to expose me?

The way I understand Tor is that the "client" (say me) connects to a relay, and that relay is the only computer they connect to from then on. If that is the case, why can't a hostile relay simply run ...
1
vote
1answer
76 views

Is it possible to link different uses of Tor by using normal changes to the browser (such as bookmarks)?

Is it possible to link different Tor identies (uses of Tor at different times) by using the Bookmarks, settings of various components of the browser, or cosmetic alterations to the toolbars? It has ...
1
vote
2answers
117 views

How vulnerable would Tor users be if a single entity controlled a large number of nodes?

There 4626 relays online. What is stopping a single entity from adding, say, 9000 relays to the network around the world so they can occasionally watch bits of the network? If the cost of this is ...