Penetration Testing mailing list archives

Re: TOR; is it exploitable?


From: DaKahuna <da.kahuna () gmail com>
Date: Sun, 31 Dec 2006 16:08:57 -0500


On Dec 30, 2006, at 4:18 AM, Lynx wrote:

On Dec 29, 2006 at 0757 -0600, Mifa appeared and said:
I found an open TOR (the onion router) port. Does anyone know if it can be exploited?

Well, I don't know any TOR exploits, but you may do some scouting:
http://www.wired.com/news/technology/0,72375-0.html?tw=rss.technology

Best,
Lynx.

Steve Murdoch gave an excellend presentation on this to the Norther Virigina Security Professionals group that was started by richard Bejtlich. The fact that skews in time and temperatures on systems could be used to distinguish on from another had never even crossed my mind as a possiblitity.


Current thread: