Shoring up Tor(newsoffice.mit.edu) |
Shoring up Tor(newsoffice.mit.edu) |
With 12% false positive rate that the paper mention, you still only need to visit a small number of websites to generate a false positive. I also doubt that the 12% is actually correct in real life circumstances, since the research only tested single traffic flows from clients and many website has JS that trigger simultaneous traffic flows while users browse the web in other tabs.
Paper: http://people.csail.mit.edu/devadas/pubs/circuit_finger.pdf
TorProject: https://blog.torproject.org/blog/technical-summary-usenix-fi...
Ars Technica: http://arstechnica.com/security/2015/07/new-attack-on-tor-ca...