[tor-relays] Detecting Network Attack [re: exit synflooded]

On Fri, Nov 24, 2017 at 6:23 PM, tor@t-3.net wrote:

Was anyone else's exit being synflooded yesterday and today?

There could be a combined monitoring array deployed among all nodes that might start to answer these questions. And further alert on all sorts of interesting network attacks launched at Tor. Software exploits... segmentation / modulation attacks... etc. This is perimeter security 101, and Tor currently has no fence, no guard dogs, not even a janitor you can ask the next day. That's beyond bad. And big oppurtunity for new research project.