[tor-dev] Draft Proposal for BridgeDB IPv6 Support

[Ralf-Philipp Weinmann]

On Dec 10, 2011, at 4:07 PM, Robert Ransom wrote:

> On 2011-12-06, Aaron <aagbsn at extc.org> wrote:
> 
>>        How does IPv6 affect address datamining of https distribution?
>>          A user may be allocated a /128, or a /64.
>>          An adversary may control a /32 or perhaps larger
>>          Proposal: Enable reCAPTCHA support by default.
> 
> How much would it cost China to have 1000 (or even 10000) CAPTCHAs
> solved?  How much of our bridge pool would such an attack obtain?


Apparently prices are as low as USD 2.00 for 1000 CAPTCHAs (solved by humans): 

http://decaptcher.com

Assuming those prices, it's cheaper to deplete Tor's bridge pool than going out on a night in the town…

Cheers,
Ralf