Is three hops enough? (was Re: Tor client over a SOCKS proxy, and Tor client running through another Tor Circuit)

[Roger Dingledine]

On Fri, Apr 28, 2006 at 11:47:07AM -0400, Anthony DiPierro wrote:
> If there is an attack that can be made, for example, over a 9 hop
> chain where an attacker only has two nodes compromised, I'm not sure
> what it is.  I suppose there could be some sort of timing attack, one
> that can't be easily mitigated by cover traffic.  Maybe that's what
> I'm missing.

Exactly:
http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#VariablePathLength

--Roger