News for hackers. Stuff that matters.

A comment on Deanonymizing Tor Circuits. Parent comment

Re:Deanonymizing Tor Circuits by incompatible on Saturday February 01, 2020 @09:29PM (#22214764)
Perhaps countries that have already blocked the Internet Archive? But Tor users can already access it through Tor without a hidden service.

If the IA itself was DoSed then wouldn't your relay stop working?

[ Parent | on HN ]
Re:Deanonymizing Tor Circuits by gruez on Saturday February 01, 2020 @10:03PM (#22214876)
random guess: the servers are reached via anycast. if you DDoS from the US, you'll take down access from the US, but not from other regions.
[ Parent | on HN ]
Re:Deanonymizing Tor Circuits by oofabz on Sunday February 02, 2020 @01:35AM (#22215523)
It's not much of a DDoS if it's from a single country.
[ Parent | on HN ]
Re:Deanonymizing Tor Circuits by az656 on Sunday February 02, 2020 @04:37AM (#22216089)
That’s pretty invalid — I often see large attacks that are almost entirely made up of bots from one country.
[ Parent | on HN ]
Re:Deanonymizing Tor Circuits by lima on Sunday February 02, 2020 @08:42AM (#22216861)
I've even seen 100+ Gbps from a single ASN in a single country.
[ Parent | on HN ]
Re:Deanonymizing Tor Circuits by az656 on Sunday February 02, 2020 @04:38AM (#22216093)
Isn’t the point of anycast to absorb the brunt of the attack? If your traffic is localized, maybe dropping the announcement for that PoP would be useful.
[ Parent | on HN ]