Re: [tor-talk] Tor compromised?

2011-10-20 Thread Julian Yon
On 20/10/11 07:12, George-Lopez wrote: 5) I've always wondered why the OSes running the node were public. Is it really necessary to make the Tor network running? It doesn't tell you anything that can't be ascertained by IP fingerprinting. Julian -- 3072D/D2DE707D Julian Yon (2011 General

Re: [tor-talk] Tor compromised?

2011-10-14 Thread torvlnt33r
A guess is that there might be a link between the bridges enumeration attack mentioned in that article and the recent spike in bridge use, for which one of the hypotheses was a botnet (https://lists.torproject.org/pipermail/tor-talk/2011-September/0 21347.html). Creating many circuits through the

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Mansour Moufid
On Thu, Oct 13, 2011 at 1:55 PM, Brandon Wiley bran...@blanu.net wrote: However, the actual IPs discovered have no publication value. Releasing them is just irresponsible. In order to receive credit, he just needs to publish the attack, which would also be more helpful to us because then we

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Mansour Moufid
On Thu, Oct 13, 2011 at 5:30 AM, George-Lopez g.lo.sub...@gmail.com wrote: French students were able to exploit a vulnerability in Tor network Details here (french): http://www.itespresso.fr/securite-it-la-confiance-dans-le-reseau-d-anonymisation-tor-est-ebranlee-47287.html/2 More information:

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Robert Ransom
On 2011-10-14, torvlnt...@fastmail.fm torvlnt...@fastmail.fm wrote: A guess is that there might be a link between the bridges enumeration attack mentioned in that article and the recent spike in bridge use, for which one of the hypotheses was a botnet

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Robert Ransom
On 2011-10-14, Mansour Moufid mansourmou...@gmail.com wrote: On Thu, Oct 13, 2011 at 5:30 AM, George-Lopez g.lo.sub...@gmail.com wrote: French students were able to exploit a vulnerability in Tor network Details here (french):

[tor-talk] Tor compromised?

2011-10-13 Thread George-Lopez
French students were able to exploit a vulnerability in Tor network Details here (french): http://www.itespresso.fr/securite-it-la-confiance-dans-le-reseau-d-anonymisation-tor-est-ebranlee-47287.html/2 ___ tor-talk mailing list

Re: [tor-talk] Tor compromised?

2011-10-13 Thread andrew
On Thu, Oct 13, 2011 at 11:30:15AM +0200, g.lo.sub...@gmail.com wrote 0.4K bytes in 7 lines about: : French students were able to exploit a vulnerability in Tor network : Details here (french): :

Re: [tor-talk] Tor compromised?

2011-10-13 Thread Roger Dingledine
On Thu, Oct 13, 2011 at 08:59:35AM -0400, and...@torproject.org wrote: it sounds like they wrote malware to watch the ram in a MS Windows relay and exploit MS Windows weaknesses to read some crypto keys. Also, keep an eye out for claims like 25% of the Tor relays runs Windows, so if I can

Re: [tor-talk] Tor compromised?

2011-10-13 Thread Dave Jevans
I went to French bilingual school through high school. its rusty, but here's additional info: He mapped TOR bridges and included them in the attack vector. These IPs will be published in November. He claims that 30% of entry nodes and bridges run Windows and are subject to privilege

Re: [tor-talk] Tor compromised?

2011-10-13 Thread Brandon Wiley
I'm all for security research and finding vulnerabilities, in Tor and otherwise. Attacks that enumerate bridges are of particular interest. However, the actual IPs discovered have no publication value. Releasing them is just irresponsible. In order to receive credit, he just needs to publish the