News for hackers. Stuff that matters.

A comment on GCHQ report on 'Mullenize' program to 'stain' anonymous electronic traffic. Parent comment

Re:GCHQ report on 'Mullenize' program to 'stain' anonymous e... by KwanEsq on Friday October 04, 2013 @07:03PM (#6498609)
Yeah, while the Post seems to be talking about the user agent string, I don't think that's what they used, the Post just misinterpreted the document's use of the phrase User Agent to refer to the browser.
[ Parent | on HN ]
Re:GCHQ report on 'Mullenize' program to 'stain' anonymous e... by dobbsbob on Friday October 04, 2013 @11:04PM (#6499210)
Indeed http://en.wikipedia.org/wiki/User_agent

Some slides on a way to do this: http://prezi.com/p5et9yawg2c6/ip-packet-staining/

Their solution was to re-route traffic to a package management device which clamps on a stain. Ipv6 makes this easy, if the traffic is Ipv4 they tunnel it inside Ipv6 with the stain header in Destination Option header.

Not sure how you would prevent this, besides the obvious answer (dont visit terrorist forums). Jondonym routing traffic through 3 mix servers might help so long as they don't stain your traffic at source by compromising your system. Making your own Tor bridge node is another solution to at least have some sort of safe entrance into the network. Seems they are unwilling to exploit relay nodes and bridges in the leaked slides.

[ Parent | on HN ]
Re:GCHQ report on 'Mullenize' program to 'stain' anonymous e... by GoodIntentions on Friday October 04, 2013 @11:55PM (#6499330)
and this naturally comes to mind:

https://tools.ietf.org/html/rfc3514

[ Parent | on HN ]