On Dec 10, 2011, at 4:07 PM, Robert Ransom wrote:
On 2011-12-06, Aaron aagbsn@extc.org wrote:
How does IPv6 affect address datamining of https distribution? A user may be allocated a /128, or a /64. An adversary may control a /32 or perhaps larger Proposal: Enable reCAPTCHA support by default.
How much would it cost China to have 1000 (or even 10000) CAPTCHAs solved? How much of our bridge pool would such an attack obtain?
Apparently prices are as low as USD 2.00 for 1000 CAPTCHAs (solved by humans):
Assuming those prices, it's cheaper to deplete Tor's bridge pool than going out on a night in the town…
Cheers, Ralf