[tor-bugs] #6676 [Tor]: Nuke ‘MyFamily’

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Jul 3 19:11:24 UTC 2013


#6676: Nuke ‘MyFamily’
--------------------------------------+-------------------------------------
 Reporter:  rransom                   |          Owner:                  
     Type:  task                      |         Status:  new             
 Priority:  major                     |      Milestone:  Tor: unspecified
Component:  Tor                       |        Version:                  
 Keywords:  tor-relay needs-proposal  |         Parent:                  
   Points:                            |   Actualpoints:                  
--------------------------------------+-------------------------------------
Changes (by arma):

 * cc: gsathya, amj703 (added)


Comment:

 Replying to [comment:3 arma]:
 > I think the strongest argument we're going to get here will come from
 Tariq's research on guard rotational vulnerabilities. He found that when
 guard rotation occurs, the bad guy is significantly more likely to get his
 relay chosen as your guard if you obey the family stuff than if you ignore
 it. The 'significantly' is because a lot of our really big relays are in
 families. So there's increased vulnerability right now in the passive (no
 compromise of big nodes) case. The question is which vulnerabilities are
 worse.
 >
 > I'm hoping to get good answers here once he finishes prepping the WPES
 paper/talk and moves on to the NDSS submission (or whatever venue is
 next).

 I talked to Tariq about this at Oakland, and he said that his analysis
 shows (counterintuitively) that taking away the Family concept actually
 doesn't change vulnerability to the above attacks much. That is, the
 'significantly' above is not actually significant.

 It would be interesting to have Aaron re-do the same calculation using his
 new TorPS simulator.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6676#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list