12 Nov
2015
12 Nov
'15
4:53 a.m.
On 11/11/15, Mirimir <mirimir@riseup.net> wrote:
... Anyway, CMU's attack did manage to compromise some onion services, most notably SR2.[0] And I'm not impressed with the Tor Project's performance. They apparently ignored the CMU attack for five months.
this was a very subtle attack in circuit behavior! additional debugging / logging had to be added to be able to track down what was going on, and even then it was a challenge to determine the attack technique. how would you have spotted it?