Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Shoring up Tor

newsoffice.mit.edu

Post reply on HN
Print view View original

1–7 of 7 posts

Re: Shoring up Tor

#2

Post by dfc »

The the discussion of the paper at the tor project or ars technica is much more informative for the HN crowd; if for no other reason than the simple fact that they include a link to the paper:

Paper: http://people.csail.mit.edu/devadas/pubs/circuit_finger.pdf

TorProject: https://blog.torproject.org/blog/technical-summary-usenix-fi...

Ars Technica: http://arstechnica.com/security/2015/07/new-attack-on-tor-ca...

Re: Shoring up Tor

#4

Post by belorn »

I find it a bit telling that neither the paper, the arstechnica nor this article mentions the most common argument against fingerprint attacks are describe in the base rate fallacy.

With 12% false positive rate that the paper mention, you still only need to visit a small number of websites to generate a false positive. I also doubt that the 12% is actually correct in real life circumstances, since the research only tested single traffic flows from clients and many website has JS that trigger simultaneous traffic flows while users browse the web in other tabs.

Re: Shoring up Tor

#5

Post by torthrw »

belorn wrote: post #4

I find it a bit telling that neither the paper, the arstechnica nor this article mentions the most common argument against fingerprint attacks are describe in the base rate fallacy. With 12% false positive rate that the paper mention, you still only need to visit a small number of websites to generate a false positive. I also doubt that the 12% is actually correct in real life circumstances, since the research only t…

Yeah. Browse the web with multiple tabs and every current fingerprinting attack is useless.
Post reply on HN