News for hackers. Stuff that matters.
Re:Tor Browser 12.0 by londons_explore on Wednesday December 07, 2022 @02:45PM (#33899236)
Tor can be made substantially less obvious if you make sure the bitrate and packet timings over each 'hop' of users connections are fixed.

Eg. each client sends out 1000 1 kbyte packets per second to each peer, once per millisecond. Inside each packet, they send the onion encrypted user data. The rest of the packet is filled with rand().

Without that protection, any network attacker can do packet size and timing analysis to unmask nearly any user rather quickly.

Re:Tor Browser 12.0 by sillystuff on Wednesday December 07, 2022 @08:00PM (#33902703)
I'm not sure if only the client does the padding, or if the padding also occurs at intermediate hops, but Tor does randomly pad traffic by default (from manpage of torrc):

       CircuitPadding 0|1
           If set to 0, Tor will not pad client circuits with additional cover
           traffic. Only clients may set this option. This option should be
           offered via the UI to mobile users for use where bandwidth may be
           expensive. If set to 1, padding will be negotiated as per the
           consensus and relay support (unlike ConnectionPadding,
           CircuitPadding cannot be force-enabled). (Default: 1)

       ReducedCircuitPadding 0|1
           If set to 1, Tor will only use circuit padding algorithms that have
           low overhead. Only clients may set this option. This option should
           be offered via the UI to mobile users for use where bandwidth may
           be expensive. (Default: 0)
Re:Tor Browser 12.0 by londons_explore on Thursday December 08, 2022 @04:45AM (#33906138)
Padding is always positive. That means every packet will always have its size increased, but never decreased. With a mixture of packet sizes, and flows, it's still only typically ~30 or so packets to identify a flow with this padding. That means a typical user might have anonymity for perhaps 1 additional second using this option...

Basically - this option doesn't serve it's intended purpose.

Re:Tor Browser 12.0 by data_maan on Wednesday December 07, 2022 @03:50PM (#33900038)
I took class in IT privacy back in the day. Exactly this idea came up. And while it really disables certain kinds of timing based attacks, the problem is it doesn't scale. If everyone did this, it seems the network would be flooded.
Re:Tor Browser 12.0 by yjftsjthsd-h on Wednesday December 07, 2022 @03:29PM (#33899808)
Is that individually tunable, or are you suggesting something that the project would have to change in their code?
Re:Tor Browser 12.0 by londons_explore on Thursday December 08, 2022 @04:17AM (#33905943)
It would only be effective if at least some proportion of clients used it.

If just a single client used this option, their traffic path, all the way to the exit node, would stand out to any network attacker.

Re:Tor Browser 12.0 by resuresu on Wednesday December 07, 2022 @03:38PM (#33899901)
Submit a pull request then.