Slashdot Mirror


Tor Open To Attack

An anonymous reader writes "A group of researchers have written a paper that lays out an attack against Tor (PDF) in enough detail to cause Roger Dingledine a fair amount of heartburn. The essential avenue of attack is that Tor doesn't verify claims of uptime or bandwidth, allowing an attacker to advertise more than it need deliver, and thus draw traffic. If the attacker controls the entry and exit node and has decent clocks, then the attacker can link these together and trace someone through the network."

5 of 109 comments (clear)

  1. Can you see what I see??? by MrShaggy · · Score: -1, Troll

    Peek-a-boo!

    --
    I have mod points and I am not afraid to use them.
  2. fp troll by Anonymous Coward · · Score: -1, Troll

    trolling

  3. WTFITOREH? by Anonymous Coward · · Score: -1, Troll

    I hate to point this out but to anyone not in the know. the Acronym TOR means absolutely NOTHING. why post a warning about something if you do not explain the acronym. WHAT THE HELL IS WITH THE EXCESSIVE ACRONYMS? You all afraid to speak a fully qualified language or are you all afraid someone might notice you have no idea what the hell you're talking about? How about expanding on the acronyms a bit eh?
    Thanks.

    1. Re:WTFITOREH? by Anonymous Coward · · Score: -1, Troll

      And what exactly is a ONION ROUTER?
      Just because you don't have a life and know every fucking there is to know about computers doesn't mean lowly little human beings like me, who do actually have more of a social life, and defiantly more social skills, would know it. As I was saying in my original post, If people wouldn't assume everyone knew what the heck they were talking about and used obscure acronyms that were not recognizable by anyone other that those in the industry
      (and yes I googled it but it was just as vague an answer as what you gave me.)

  4. Re:welcome to the watchlist by twitter · · Score: -1, Troll

    Can posting on slashdot count as being media whore? Damn I hope not.

    You are only a whore if you don't like being here, but do it anyway because someone is paying you. Here's a short list of people who hate Slashdot but post prolifically anyway:

    There are plenty of others and they are easy to identify because they keep saying the same things: M$ rules, free software sucks and Slashdot sucks.

    --

    Friends don't help friends install M$ junk.