Questions tagged [traffic-analysis]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
25 views

About Traffic Confirmation Attacks

As you all know traffic confirmation attacks, time correlating the end links of a TOR connection, is a known vulnerability against TOR. I have a university project on these correlation attacks, but ...
3
votes
1answer
99 views

Does Tor still monitor “shadow” relays?

I've been researching methods to monitor hidden services for a university project. I came across this paper which talks about injecting relays as hidden service directories to gather onion addresses. ...
0
votes
1answer
201 views

How secure is Tor? Can Tor's traffic be monitored by an attacker?

In the first episode of the first season of Mr.Robot, Elliot is able to monitor Rohit's traffic even though he was using Tor and .onion sites. How did Elliot do that? Would it be possible to do that ...
0
votes
0answers
41 views

Fingerprinting third generation hidden services

It is known that it is possible for an observer between a Tor client and the guard relay to detect whether or not the client is attempting to connect to a hidden service (although it is not currently ...
0
votes
2answers
419 views

If Tor is backed by government

If Tor would be backed by government (https://www.zerohedge.com/news/2018-03-02/tor-project-almost-100-funded-us-government-report), which approach would they need to take to technically be able to ...
0
votes
2answers
258 views

Does the Tor browser counter wiretapping?

I have learned about Tor quite recently. Where I live, new laws are made for digital surveillance. It looks like the law will gain new tools with the motivation to prevent terrorism. There is a lot of ...
0
votes
1answer
132 views

Simulating Correlation attacks on Tor using Shadow

Is it possible to simulate correlation attacks on Tor using Shadow? If it's possible what's the easiest way to implement it? If it's not possible, then is there any other simulators that can be used ...
2
votes
1answer
1k views

Net Neutrality Implications [closed]

If the "net neutrality" thing is stopped, will it affect Tor users? What about Onion services? I am not qualified to add more details on "net neutrality" so feel free to add to this post
1
vote
0answers
231 views

Clarification of Risks to Anonymity [closed]

My goal is to get a clear sense of what is required to maintain anonymity. In a sense I'm mapping the flow of traffic in my head and trying to understand how certain traffic might interact in ways ...
0
votes
1answer
119 views

Tracking users via google APIs?

if i open website1.com in one tab and it uses some google analytics or google fonts api, then open website2.org in another tab which also uses google products... do the google domains see different ...
0
votes
1answer
41 views

Alterations to Tor and finding a way to run tests and simulations [duplicate]

For one of my assignments I have to conduct a research paper. I decided to propose a solution vulnerabilities TOR has with traffic analysis. I'm suggesting adding in random delays,random hop count ...
0
votes
1answer
88 views

Suspcious IMAP traffic between my machine and a Tor entry node

I was running Wireshark and noticed that my machine sends IMAP requests to 37.187.22.131, which, according to my TorBrowser, is the entry node I'm connected to. Likewise, my machine seems to be ...
3
votes
1answer
314 views

How does de-anonymization work?

I heard that someone, who can read the traffic of many tor nodes (like the government of a country where many nodes are located) can find out which user is sending/reading data to/from which resource ...
3
votes
2answers
3k views

Is the “Ron's Coffee” Tor-related hack technically possible in episode 1x01 of Mr. Robot?

In the episode 1x01 of Mr. Robot, Elliot confronts the owner of Ron's Coffee. He basically states that the man is hosting illegal (child pornography) content served in the form of a website that the ...
1
vote
1answer
1k views

Does Tor usage increase the traffic volume compared to other browsers?

Let's say I visit some page via Chrome with in/out packages at the level of 10MB. Could we know (theoretically) how the traffic volume will be affected if I visit the same site via Tor? Will Tor ...
2
votes
3answers
108 views

Can Tor run on messaging applications on my phone, and how?

I would like to know if Tor can cooperate with other applications, if the information leaks can be stopped and I can be anonymous. For instance on a messaging application, if someone were to try to ...
2
votes
1answer
69 views

traffic-analysis

I am (very) new to Tor. As I understand it, each time a data-package passes a Tor-relay, it is encrypted/decrypted, thereby changing in size only marginally. It seems to me that if somebody monitors ...
4
votes
3answers
581 views

Does caploader able to identify Tor traffic in the network?

I found this blog post which says that they were able to identify Tor traffic by using a software called caploader? Have any one tried this software? I wasn't able to try it by myself as the protocol ...
1
vote
0answers
63 views

Is traffic analysis easier for relay adversaries than for network adversaries?

I gather that relay adversaries employ traffic analysis to determine that two of their relays are part of the same circuit. And I vaguely recall a comment, perhaps on the Tor Project blog, that ...