Collaborate Disseminate
A vulnerability in Skype mobile apps can be exploited by attackers to discover a user’s IP address – a piece of information that may endanger individuals whose physical security depends on their general location remaining secret. The vulner… Continue reading Easy-to-exploit Skype vulnerability reveals users’ IP address
It’s been known ever since Tor existed that flow correlation attacks can break Tor’s anonymity, but whereas in the past flow correlation attacks had a false positive rate far too high to be useful against an anonymity network the size of T… Continue reading Impact of Deep Learning Based Flow Correlation on Tor
I was wondering if when you use something like Apple’s ‘Hide my Email’ functionality if there’s some way for the organization to still recover the user’s original email if the user is then asked to confirm their email (eg you get a confirm… Continue reading Does Apple’s Hide my Email feature really work?
Alice and Bob are communicating frequently via an encrypted overlay network. Eve can observe the timing and length of Alice’s and Bob’s incoming and outgoing ip traffic, but cannot read their ciphertexts. Additionally, the overlay network … Continue reading What is using timing and cryptotext length for deanonymization called?
Recently, while using the Tor Browser, NoScript popped up the following warning when I opened a stack overflow link in a new tab from duckduckgo:
Potential Identity Leak
You are about to load a page from stackoverflow.com. If you are a s… Continue reading What is this potential identity leak that NoScript warns about?
Assume some entity were to maintain a table (e.g. SQL) of highly sensitive information. They also provide a web interface with which one can filter any column in this table by range (minimum/maximum) or by selecting individual values for c… Continue reading Can a table be reconstructed by range queries?
Say someone wants to send a document overseas while living in a hostile country. He uses tor over public wifi. What are some ways he can be tracked if he uses a burner laptop and public wifi? Few ways I can think of:
CCTV cameras or peopl… Continue reading How can someone using public wifi be deanonymized?
Suppose we have two voice samples, A and B, which are converted from the same person’s voice into different voices respectively by a voice changer. In addition, let us assume that the voice conversion causes severe loss of the original voi… Continue reading Can voice analysis be used to determine if voice samples converted in two different ways are from the same person?
Yesterday, Msgr. Jeffrey Burrill of the U.S Council of Catholic Bishops resigned because an investigation by Pillar, a Catholic newsletter, alleged that he had used Grindr to find hookups. Fairly standard stuff, but the truly perplexing pa… Continue reading Feasability of deanonymizing commercially available advertiser data
I recently heard about the Nym mixnet and am researching it and the Sphinx packet format. So far it looks promising, but there is one thing I’m unsure of.
Networks like Tor use ephemeral keys to limit the length of time an adversary could … Continue reading Nym Perfect Forward Secrecy