[e-privacy] Tor Open To Attack

[Cyberiade.it Anonymous Remailer]

http://yro.slashdot.org/article.pl?sid=07/02/25/1913219

"A group of researchers have written a paper that lays out an attack
against Tor[1] (PDF) in enough detail to cause Roger Dingledine a fair
amount of heartburn. The essential avenue of attack is that Tor doesn't
verify claims of uptime or bandwidth, allowing an attacker to advertise
more than it need deliver, and thus draw traffic. If the attacker
controls the entry and exit node and has decent clocks, then the attacker
can link these together and trace someone through the network."


[1]
http://www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf