I think these details released are in line with our understanding of the attack: a) Enumerate network (by trying routes, or reading the broadcast list.) b) Scan the nodes c) Hack the vulnerable ones, installing malware, and/or add your own malicious nodes d) DOS the un-comprimized nodes, forcing network traffic to the attacker controlled nodes
The only things that seem like they could be of value are the malicious node used to support traffic correlation and the alluded to TCP-Reset attack (which is probably just a syn flood). The rest is hype, you are safe to use Tor as usual. If you are worried about using Tor, grab a list of exit nodes and try to hack them yourself. -Travis On Tue, Nov 8, 2011 at 10:47 AM, not here <zpamh...@gmail.com> wrote: > That's a followUp! > TOR Attack isn't hype, and on 10th of november, mayhem will be released > don't troll, you fool. > > http://cvo-lab.blogspot.com/2011/11/tor-attack-technical-details.html > > > ------------------------------------------------------------------------------------------------- > "Rumors of Tor's compromise are greatly exaggerated" > > https://blog.torproject.org/blog/rumors-tors-compromise-are-greatly-exaggerated > > [[ Mohit Kumar ]] @ [[ 24/10/2011 16:31 > ]]-------------------------------------------------- > > French researchers from ESIEA < > http://www.esiea.fr/c/en/Web.Esiea.Public.cuke?>, a French engineering > school, have found and exploited some serious vulnerabilities in the TOR > network. They performed an inventory of the network, finding 6,000 > > machines, many of whose IPs are accessible publicly and directly with > the system’s source code. They demonstrated that it is possible to take > control of the network and read all the messages that circulate. > > > > But there are also hidden nodes, the Tor Bridges, which are provided by > the system that in some cases. Researchers have developed a script that, > once again, to identify them. They found 181. "/We now have a complete > picture of the topography of > > Tor/," said Eric Filiol. > > > > Read More at "The Hacker News" -- > http://thehackernews.com/2011/10/tor-anonymizing-network-compromised-by.html > > -- > > *Regards,* > > *Owner,* > > *The Hacker News <http://www.thehackernews.com/>* > > *Truth is the most Powerful weapon against Injustice.* > > > > > > > > _______________________________________________ > > Full-Disclosure - We believe in it. > > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > > Hosted and sponsored by Secunia - http://secunia.com/ > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > -- Twitter <https://twitter.com/tbiehn> | LinkedIn<http://www.linkedin.com/in/travisbiehn>| GitHub <http://github.com/tbiehn> | TravisBiehn.com<http://www.travisbiehn.com>
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
