Critical Tor flaw leaks users’ real IP address
arstechnica.com
Critical Tor flaw leaks users’ real IP address
1–10 of 91 posts
Re: Critical Tor flaw leaks users’ real IP address
#2Just the other day I saw some file://-based exploit. Didn’t read the specifics of this, but not validating a URL’s scheme must be a very common source of problems. It’s so easy to overlook the scheme when everything is https?:// all the time. But alas, file://, it’s real, browsers attempt to work with it. Another edge to be aware of!!
Re: Critical Tor flaw leaks users’ real IP address
#3Just the other day I saw some file://-based exploit. Didn’t read the specifics of this, but not validating a URL’s scheme must be a very common source of problems. It’s so easy to overlook the scheme when everything is https?:// all the time. But alas, file://, it’s real, browsers attempt to work with it. Another edge to be aware of!!
This is the same exploit, it's from Friday.
Re: Critical Tor flaw leaks users’ real IP address
#4[deleted]
Re: Critical Tor flaw leaks users’ real IP address
#5If an attacker learned a Tor Browser user's real IP address yesterday, and the leak gets fixed today, can the attacker still somehow identify that user's traffic tomorrow?
Browser fingerprinting comes to mind, but is there another method?
Re: Critical Tor flaw leaks users’ real IP address
#6If an attacker learned a Tor Browser user's real IP address yesterday, and the leak gets fixed today, can the attacker still somehow identify that user's traffic tomorrow? Browser fingerprinting comes to mind, but is there another method?
[deleted]
Re: Critical Tor flaw leaks users’ real IP address
#7How long has the exploit existed? Did it magically appear after Appelbaum was run out of town on vague allegations of sexual harrassment?
Re: Critical Tor flaw leaks users’ real IP address
#8If an attacker learned a Tor Browser user's real IP address yesterday, and the leak gets fixed today, can the attacker still somehow identify that user's traffic tomorrow? Browser fingerprinting comes to mind, but is there another method?
Depends on the attacker -- if they're able to surveil the network upstream of the IP address they just learned, they could use timing analysis.
i.e. if the attacker is the FBI and they're trying to unmask visitors to an onion service, and they learned your IP address (and hence real life name) through this method, they can also confirm that you're visiting the site they're surveiling through correlating packet times leaving your interface and arriving at the surveiled server's.
Maybe there's a less dramatic way to do it too?
Re: Critical Tor flaw leaks users’ real IP address
#9If an attacker learned a Tor Browser user's real IP address yesterday, and the leak gets fixed today, can the attacker still somehow identify that user's traffic tomorrow? Browser fingerprinting comes to mind, but is there another method?
I think most importantly, most people's IP address given by ISP is "fixed" for a long period of time.
Re: Critical Tor flaw leaks users’ real IP address
#10Interesting that this has been posted 5 times in the past few days without receiving votes.