[tor-bugs] #15254 [Tor]: Enable hidden-service statistics by default

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 24 15:02:36 UTC 2015


#15254: Enable hidden-service statistics by default
-------------------------+-------------------------------------------------
     Reporter:  dgoulet  |      Owner:
         Type:           |     Status:  reopened
  enhancement            |  Milestone:  Tor: 0.2.7.x-final
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  SponsorR tor-hs stats
   Resolution:           |  TorCoreTeam201509 PostFreeze027
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------

Comment (by cypherpunks):

 Replying to [comment:21 arma]:
 > Replying to [comment:13 cypherpunks]:
 > > The existing bandwidth statistics are already dangerous in terms of
 guard discovery (#13988) and combining them with the statistics in this
 ticket enables easier attacks.
 >
 > Like what? I know there's always the risk of attacks that we haven't
 thought of, but here there are concrete upsides, and a bunch of smart
 people who have thought about the issue and think it'll be fine. We're in
 much better shape here than we are in a lot of other areas of Tor (since
 there's so much to cover, and it's so complex, and there aren't enough
 smart people to go around).
 If Eve knows Alice is going to download a large chunk of data from Bob
 soon, of either one large size or another, but not what RP they will use,
 or even what Bob's HS address is, Eve does get extra information from
 these statistics. If a group of people is going to start using Ricochet
 soon on a date Eve doesn't know, again these stats leak information, in an
 unexpected way.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15254#comment:28>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list