ALL Onion Services Vulnerable, and Tor can't patch it

Описание: Thanks for watching ❤️
JOIN THE DISCORD! 👉   / discord  

A group of security researchers just developed a new family of attacks dubbed OnionFlation, that turn tors denial of service defense mechanism against its own users. This enables attackers to essentially bring down any onion service of their choosing. This class of attacks actually takes advantage of an asymmetry in onion routing, which reveals a persistent issue facing the tor network. As a result, these types of attacks are difficult to properly patch or defend against. I use my own Onion Service to demonstrate the principals of this attack in real time.

Onions Got Puzzled Paper & Presentation:
https://www.usenix.org/conference/use...

Sources:
https://blog.torproject.org/introduci...
https://blog.torproject.org/tor-netwo...
https://onionservices.torproject.org/...
https://spec.torproject.org/proposals...
https://spec.torproject.org/proposals...


0:00 – Intro
1:00 – Background
3:14 – Clearnet Onion Routing
4:51 – DEMO 1: Clearnet Circuit
5:13 – Onion Service Routing
10:26 – DEMO 2: Onion Service Circuits
13:38 – Regular DoS Attacks
15:29 – PoW Puzzles
18:49 – OnionFlation Attacks
26:11 – DEMO 3: ONIONFLATION ATTACK
39:52 – Patched? Not Yet...


MUSIC CREDITS:
LEMMiNO - Cipher
   • LEMMiNO - Cipher (BGM)  
CC BY-SA 4.0

LEMMiNO - Firecracker
   • LEMMiNO - Firecracker (BGM)  
CC BY-SA 4.0

LEMMiNO - Nocturnal
   • LEMMiNO - Nocturnal (BGM)  
CC BY-SA 4.0

LEMMiNO - Siberian
   • LEMMiNO - Siberian (BGM)  
CC BY-SA 4.0

LEMMiNO - Encounters
   • LEMMiNO - Encounters (BGM)  
CC BY-SA 4.0

LEMMiNO - Aloft
   • LEMMiNO - Aloft (BGM)  
CC BY-SA 4.0

LEMMiNO - Blackout
   • LEMMiNO - Blackout (BGM)  
CC BY-SA 4.0


#software #computerscience #code #hacking #cybersecurity #exploit #vulnerability #pentesting #privacy #malware #cyber #cybersecurity #backdoor #hacked #cyberattack #tor #torbrowser #onionrouting #deanonymize #darknet #torrelay #censorship #surveillance #tracking #firewall #networking #leak #digitalID #onionflation #deepweb #darkweb #kali #linux