[TWN team] Recent changes to the wiki pages

Lunar lunar at torproject.org
Tue Jul 15 15:40:06 UTC 2014


===========================================================================
=== https://trac.torproject.org/projects/tor/wiki/TorWeeklyNews/2014/28 ===
===========================================================================

version 20
Author: lunar
Date:   2014-07-15T14:56:19+00:00

   write about layered guards

--- version 19
+++ version 20
@@ -11,6 +11,43 @@
 
 Welcome to the sixteenth issue of Tor Weekly News in 2014, the weekly
 newsletter that covers what is happening in the Tor community.
+
+Defending against guard discovery attacks with layered rotation time
+--------------------------------------------------------------------
+
+Guard nodes are a key component of a Tor client’s anonymity. Once
+an attacker gain knowledge of which guard node is being used by a
+particular client, it's only a matter of monitoring before the actual
+client IP address is found.
+
+George Kadianakis has restarted the discussion on how to slow down
+guard discovery of hidden services [XXX] by exploring the idea of
+“keeping our middle nodes more static”. The idea is to slow down the
+attacks based on repeated circuit destruction by reusing the
+same “middle nodes for 3-4 days instead of choosing new ones for every
+circuit”. Introducing this new behaviour will slow down the attack,
+but George asks “are there any serious negative implications?”
+
+The idea is not new, as Paul Syverson pointed out [XXX]: “Lasse and I
+suggested and explored the idea of layered guards when we introduced
+guards”. He adds “there are lots of possibilities here”.
+
+George worries than middle nodes would then “always see your traffic
+coming through your guard (assuming a single guard per client)”. Ian
+Goldberg added “the exit will now know that circuits coming from the
+same middle are more likely to be the same client”. Restricting the
+change to only hidden services and not every clients mean that it will
+be “easy for an entry guard to learn whether a client has static middle
+nodes or not”.
+
+As George puts it the latest message in the thread [XXX]: “As always,
+more research is needed…” Please help!
+
+ [XXX]: https://bugs.torproject.org/9001
+ [XXX]: https://lists.torproject.org/pipermail/tor-dev/2014-July/007122.html
+ [XXX]: https://lists.torproject.org/pipermail/tor-dev/2014-July/007125.html
+ [XXX]: https://lists.torproject.org/pipermail/tor-dev/2014-July/007123.html
+ [XXX]: https://lists.torproject.org/pipermail/tor-dev/2014-July/007126.html
 
 More monthly status reports for June 2014
 -----------------------------------------
@@ -145,5 +182,4 @@
 
 Possible items:
 
- * Defending against guard discovery attacks by pinning middle nodes https://lists.torproject.org/pipermail/tor-dev/2014-July/007122.html
  * Tor incentives research roundup: GoldStar, PAR, BRAIDS, LIRA, TEARS, and TorCoin https://blog.torproject.org/blog/tor-incentives-research-roundup-goldstar-par-braids-lira-tears-and-torcoin

version 19
Author: lunar
Date:   2014-07-15T14:13:50+00:00

   add events

--- version 18
+++ version 19
@@ -122,14 +122,13 @@
 Upcoming events
 ---------------
 
-Jul XX-XX | Event XXX brief description
-          | Event City, Event Country
-          | Event website URL
-          |
-Jul XX-XX | Event XXX brief description
-          | Event City, Event Country
-          | Event website URL
-
+ July 15-19        | 14th Privacy Enhancing Technologies Symposium
+                   | Amsterdam, The Netherlands
+                   | https://petsymposium.org/2014/
+                   |
+ August 20-22      | Roger @ USENIX Security Symposium ’14
+                   | San Diego, California, USA
+                   | https://www.usenix.org/conference/usenixsecurity14
 
 This issue of Tor Weekly News has been assembled by XXX, XXX, and
 XXX.

version 18
Author: lunar
Date:   2014-07-15T13:53:50+00:00

   more mirrors

--- version 17
+++ version 18
@@ -83,14 +83,17 @@
  [XXX]: https://lists.torproject.org/pipermail/tor-reports/2014-July/000590.html
 
 Thanks to the University of Edinburgh’s School of Informatics [XXX],
-funcube.fr [XXX], Stefano Fenoglio [XXX], IP-Connect [XXX], and Justin
-Ramos [XXX] for running mirrors of the Tor Project website!
+funcube.fr [XXX], Stefano Fenoglio [XXX], IP-Connect [XXX], Justin
+Ramos [XXX], Jacob Henner from Anatomical Networks [XXX], and
+Hackabit.nl [XXX] for running mirrors of the Tor Project website!
 
  [XXX]: https://lists.torproject.org/pipermail/tor-mirrors/2014-July/000623.html
  [XXX]: https://lists.torproject.org/pipermail/tor-mirrors/2014-July/000624.html
  [XXX]: https://lists.torproject.org/pipermail/tor-mirrors/2014-July/000627.html
  [XXX]: https://lists.torproject.org/pipermail/tor-mirrors/2014-July/000632.html
  [XXX]: https://lists.torproject.org/pipermail/tor-mirrors/2014-July/000633.html
+ [XXX]: https://lists.torproject.org/pipermail/tor-mirrors/2014-July/000634.html
+ [XXX]: https://lists.torproject.org/pipermail/tor-mirrors/2014-July/000638.html
 
 Tor help desk roundup
 ---------------------



-- 
Your friendly TWN monitoring script

      In case of malfunction, please reach out for lunar at torproject.org
          or for the worst cases, tell weasel at torproject.org to kill me.


More information about the news-team mailing list