full-disclosure - Re: Tor anonymizing network Compromised by French researchers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 24 Oct 2011 12:31:43 -0400
From: Valdis.Kletnieks@...edu
To: Travis Biehn <tbiehn@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Tor anonymizing network Compromised by French
	researchers

On Mon, 24 Oct 2011 11:53:02 EDT, Travis Biehn said:

> So they put up a fake network, 'hacked' most of the nodes, and with complete
> control of their dummy network they were able to figure out traffic
> movement?
> 
> This is news why?

It's not news - it's *long* been known that Tor would be breakable if somebody
pwned a sufficient percentage of the nodes.  It's been regarded as a mostly
theoretical attack, because the sort of people that run Tor have up to now been
the paranoid type that tend to secure their systems better.

The only part of *news* in it was this:

"Researchers showed that one third of the nodes are vulnerable,"

So maybe the "people who run Tor are more paranoid" assumption is flawed and
needs to be reconsidered.

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/