Re: [Tails-dev] TCP Sequence Numbers leak System Clock

2014-09-29 Thread Daniel Kahn Gillmor
On 09/27/2014 05:55 AM, Griffin Boyce wrote: But to your point, local system time doesn't/shouldn't impact correlation attacks at all. Every network hop between the user and destination has a set system time that is far better to determine sequence. Correlation attacks are nice on paper,

[Tails-dev] TCP Sequence Numbers leak System Clock

2014-09-27 Thread Patrick Schleizer
Hi, you might be interested in this: https://twitter.com/ioerror/status/509159304323416064 Why could it be relevant? Tor Browser (and other applications?) leak the system clock in default settings [1]. At the same time, the system clock leaks to ISP level observers through TCP sequence numbers.

Re: [Tails-dev] TCP Sequence Numbers leak System Clock

2014-09-27 Thread Griffin Boyce
Mostly off-topic, but: Tor will also fail to start if it thinks that the system time/date are dramatically wrong. I've had to set the system date before for tor to be able to create a circuit at all (though it was wrong by days, not minutes). So, do people fetch network time before

Re: [Tails-dev] TCP Sequence Numbers leak System Clock

2014-09-27 Thread intrigeri
So, do people fetch network time before bootstrapping? https://tails.boum.org/contribute/design/Time_syncing/ cheers! ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an