News for hackers. Stuff that matters.

A comment on Hackers breach FSB contractor, expose Tor deanonymization project. Parent comment

Re:Hackers breach FSB contractor, expose Tor deanonymization... by Paul-ish on Saturday July 20, 2019 @11:44AM (#20486414)
A custom protocol can potentially be fingerprinted. I wouldn't be surprised if they used something less sophisticated. Like (encrypted) direct messages on twitter/reddit/facebook. This way the traffic blends with the rest.
[ Parent | on HN ]
Re:Hackers breach FSB contractor, expose Tor deanonymization... by nameismypw on Saturday July 20, 2019 @12:02PM (#20486505)
There's a companion project to Tor called obs4proxy which is designed to hide the protocol's implementation.
[ Parent | on HN ]
Re:Hackers breach FSB contractor, expose Tor deanonymization... by kijin on Saturday July 20, 2019 @12:39PM (#20486779)
It doesn't need to be a completely custom protocol. HTTPS can handle a very large percentage of anyone's communication needs these days.
[ Parent | on HN ]
Re:Hackers breach FSB contractor, expose Tor deanonymization... by Paul-ish on Sunday July 21, 2019 @03:25PM (#20493158)
An application level protocol implemented on top of HTTPS can be fingerprinted. If you look up "Website Traffic Fingerprinting" you will see what I mean. That traffic is encrypted.
[ Parent | on HN ]