Comments on: Hacking Tor – A Flaw Appears?

By: navin

navin — Tue, 13 Jan 2009 11:14:01 +0000

I agree chris, but fact of the matter is tht most users do use privoxy for Tor and don’t really have the technical knowhow on how to set up a personal box…… tht leaves them in a state where their online security can be compromised

By: Chris

Chris — Mon, 12 Jan 2009 18:25:01 +0000

The problem with this paper is that they expect that the user is only using something like Privoxy for Tor. What if the user is default-routing all his TCP traffic through his own Tor proxy box? The method he uses for demasking won’t work because all the TCP traffic is being routed through Tor anyway.

I don’t see anything groundbreaking about this paper and his methods are easily defeated.

By: ethernode

ethernode — Tue, 05 Dec 2006 16:50:04 +0000

I was talking about the packetstormsecurity.org implications, not about the flaw itself. Following what i understood from the article, that would mean that tor’s anonymity features are fake (because of the “sent back via DNS tunnel to an external host to confirm the real identity of the host”) ? I’m beginning to guess i’m saying shit, but doesn’t this back-tunnel outpass the 1-hop only feature?

By: Darknet

Darknet — Tue, 05 Dec 2006 16:41:48 +0000

Brian: Yah I guess it would, anything as such can circumvent the anonymity of a proxy, that's why using something like AnonymOS is preferable. gerg: Thanks I'll check that out. ethernode: I don't think so this a flaw in any proxy based system, it's just showing how its relevant to Tor aswell. It's still the best system there is ATM.

By: ethernode

ethernode — Tue, 05 Dec 2006 12:09:00 +0000

So, if the SANS is serious about this, is tor a giant honeypot? Corporate or occult?

By: gerg

gerg — Fri, 01 Dec 2006 00:17:56 +0000

This so called paper only describe methods that are known for more than 10 years and that work with every proxy…
There’s no Tor specific flaws in this document.

The paper title is just a way to make lamers talk and provide “instant celebrity” to his author… nothing new here

If you want some real technical paper on Tor search a pdf document on how to discover the location of an hidden service using statistics based on rendez-vous nodes.

By: Brian

Brian — Thu, 30 Nov 2006 19:40:47 +0000

Thanks for this post, I use tor pretty extensively myself and I have to say this is troubleing. The only thing is wouldn’t this “vulnerability” fall into the same category as the already known ActiveX and Flash vulnerabilities for these plugin’s requiring a direct connection with the client and thus circumventing the proxy network?