full-disclosure - Re: Tor anonymizing network Compromised by French researchers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20111024170946.18366dm0hux56itm@mail.funkymunkey.co.uk>
Date: Mon, 24 Oct 2011 17:09:46 +0100
From: charlie@...kymunkey.com
To: Travis Biehn <tbiehn@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Tor anonymizing network Compromised by French
 researchers

I got the impression that they have fully compromised the actual TOR  
network, not a dummy network, am I wrong?

Charlie

Quoting Travis Biehn <tbiehn@...il.com>:

> So they put up a fake network, 'hacked' most of the nodes, and with complete
> control of their dummy network they were able to figure out traffic
> movement?
>
> This is news why?
>
> -Travis
>
> On Mon, Oct 24, 2011 at 10:31 AM, Mohit Kumar <thehackernews@...il.com>wrote:
>
>> French researchers from  
>> ESIEA<http://www.esiea.fr/c/en/Web.Esiea.Public.cuke?>,
>> a French engineering school, have found and exploited some serious
>> vulnerabilities in the TOR network. They performed an inventory of the
>> network, finding 6,000 machines, many of whose IPs are accessible publicly
>> and directly with the system?s source code. They demonstrated that it is
>> possible to take control of the network and read all the messages that
>> circulate.
>>
>> But there are also hidden nodes, the Tor Bridges, which are provided by the
>> system that in some cases. Researchers have developed a script that, once
>> again, to identify them. They found 181. "*We now have a complete picture
>> of the topography of Tor*," said Eric Filiol.
>>
>> Read More at "The Hacker News" --
>> http://thehackernews.com/2011/10/tor-anonymizing-network-compromised-by.html
>> --
>> *Regards,*
>> *Owner,*
>> *The Hacker News <http://www.thehackernews.com/>*
>> *Truth is the most Powerful weapon against Injustice.*
>>
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>
>
>
> --
> Twitter <https://twitter.com/tbiehn> |
> LinkedIn<http://www.linkedin.com/in/travisbiehn>|
> GitHub <http://github.com/tbiehn> |  
> TravisBiehn.com<http://www.travisbiehn.com>
>



-------------------------------------------------------------------------------------------------------------------
This message was sent from the FunkyMunkey mail server  
(mail.funkymunkey.co.uk)
If you have any queries/complaints regarding mail sent from this  
server please direct them to admin@...kymunkey.com


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/