[tor-bugs] #15254 [Tor]: Enable hidden-service statistics by default
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Sep 24 15:02:36 UTC 2015
#15254: Enable hidden-service statistics by default
-------------------------+-------------------------------------------------
Reporter: dgoulet | Owner:
Type: | Status: reopened
enhancement | Milestone: Tor: 0.2.7.x-final
Priority: major | Version:
Component: Tor | Keywords: SponsorR tor-hs stats
Resolution: | TorCoreTeam201509 PostFreeze027
Actual Points: | Parent ID:
Points: |
-------------------------+-------------------------------------------------
Comment (by cypherpunks):
Replying to [comment:21 arma]:
> Replying to [comment:13 cypherpunks]:
> > The existing bandwidth statistics are already dangerous in terms of
guard discovery (#13988) and combining them with the statistics in this
ticket enables easier attacks.
>
> Like what? I know there's always the risk of attacks that we haven't
thought of, but here there are concrete upsides, and a bunch of smart
people who have thought about the issue and think it'll be fine. We're in
much better shape here than we are in a lot of other areas of Tor (since
there's so much to cover, and it's so complex, and there aren't enough
smart people to go around).
If Eve knows Alice is going to download a large chunk of data from Bob
soon, of either one large size or another, but not what RP they will use,
or even what Bob's HS address is, Eve does get extra information from
these statistics. If a group of people is going to start using Ricochet
soon on a date Eve doesn't know, again these stats leak information, in an
unexpected way.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15254#comment:28>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list