Re: [tor-dev] Proposal 246: Defending Against Guard Discovery Attacks using Vanguards

2015-07-17 Thread Aaron Johnson
I agree with most of what you said regarding the threat of a targeted observer. What I disagree with is that an adversary running his own relays is less of a threat. Running relays is trivial, and running 5% of the guards is fairly cheap (I estimate ~$3000/month (please ask for details)). If you

[tor-dev] Finding location metadata in large "dark market" datasets

2015-07-17 Thread Griffin Boyce
Hello all, I came across a blog post that might interest you all. @techdad did a quick analysis of public images from online black markets (such as Silk Road et al)[2] from 2011-2015, and came to the following conclusion: "After parsing hundreds of thousands of images, I came across about

Re: [tor-dev] Proposal 246: Defending Against Guard Discovery Attacks using Vanguards

2015-07-17 Thread s7r
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 7/18/2015 12:49 AM, A. Johnson wrote: > > Not having the third guards be selected by every second guard makes > sense when you consider that the adversary may not be able to > compromise all relays equally. That was not a consideration I had > in

Re: [tor-dev] Proposal: Merging Hidden Service Directories and Introduction Points

2015-07-17 Thread A. Johnson
> This proposal doubles the default number of IPs and reduces the "cost" > of being an IP since the probability of being selected is no longer > bandwidth-weighted. Is this a fair tradeoff for the performance > improvement? That seems easy to fix. Make the number of Introduction Points the same a

Re: [tor-dev] Proposal 246: Defending Against Guard Discovery Attacks using Vanguards

2015-07-17 Thread A. Johnson
>> Here's another crazy idea that would potentially bring this Vanguards >> idea closer to "Virtual Circuits": What if you divided your third-level >> Vanguards into NUM_SECOND_GUARDS isolated buckets, and mapped exactly >> one these buckets to each of your second-level guards? ... >> That way, i

[tor-dev] 4th status report for OnioNS

2015-07-17 Thread Jesse V
Hello again everyone, This report covers the period of time that I spent in Washington, DC at the hidden service meetings. I made excellent progress on this project. On the 10th, for example, I pushed nearly 30 commits. I fixed many significant bugs and improved many areas that would make the

Re: [tor-dev] [Patch] or/config.c for MSVC

2015-07-17 Thread Gisle Vanem
Nick Mathewson wrote: > I made the changes conditional on not having GCC, since the GCC syntax will work with older versions of GCC. (Somebody should check whether we care about those versions.) I saw that; from the Changelog: o Minor features (portability): - Use C99 variadic macros w