Lmst

@thenewoil which it inevitably does!

There is no way to do effective #AgeVerification without #Deanonymization - either explicit or implicit.

I really like this kind of content that breaks down research papers for the rest of us. I had no idea that BGP hijacking was such a threat.

I wonder if any security folks out there have more up-to-date information on the resilience of OVH, Hetzner, DigitalOcean and other major provider networks. Are Counter-RAPTOR guards, counter-fingerprinting measures, BGP monitoring and RPKI being deployed in the wild?

https://youtu.be/XDsLDhKG8Cs

#Security #BGP #Networking #Tor #AttackVector #Deanonymization

Comprehensive Analysis of De-Anonymization Attacks Against the Privacy Coin XMR

https://monero.forex/is-monero-totally-private-a-comprehensive-analysis-of-de-anonymization-attacks-against-the-privacy-coin/

#HackerNews #DeAnonymization #Attacks #PrivacyCoin #XMR #Monero #Cybersecurity

One issue I consider to remain with low-latency mixnets and overlay networks is that downtime can be deanonymizing.

Even if one has constant bitrate with randomly-selected short downtime/network degradation simulation, that doesn't really help when one's town loses power entirely a few times in a year or whatever and someone bothers to try and map the downtimes onto known locations of power outages over the same year.

Is there any sensible model for handling this failure case?

#Mixnet #TimingAnalysis #SideChannels #Anonymization #Deanonymization #WhyNoDirectTagEditingInAPObjectsYet

Unique 0-click #deanonymization attack targeting #Signal, #Discord and hundreds of platform
https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117
#twitter #x #cloudflare

Администраторов Telegram каналов теперь можно деанонимизировать по кастомным стикерам и эмоджи.

Уязвимость заключается в том, что UID стикер-пака позволяет извлечь ID его создателя, что помогает раскрыть профиль пользователя.

Авторы Telegram-каналов заказывают у дизайнеров фирменные наклейки и «регистрируют» их в мессенджере с помощью бота Stickers, не подозревая о том, что это раскрывает их аккаунт всем.

Для популярной OSINT-утилиты Maltego даже уже разработали модуль позволяющий автоматизировать данную задачу.

src: https://github.com/vognik/maltego-telegram

#blacktriangle #anonymity #deanonymization #maltego #telegram #opensource #osint

Apparently the @CCC has some infos @torproject needs, and it seems they're desperate to get their hands onto that intel.

Dear folks at the #CCC, do the right and responsibe thing and send the details to #TorProject so they can assess the relevance re: #Tor and take appropriate steps!

Anyone who has details is asked to sent them in a #PGP/MIME-encrypted eMail to [security@torproject.org]( malto:security@torproject.org ) using the Pubkey [ 835B 4E04 F6F7 4211 04C4 751A 3EF9 EF99 6604 DE41 ]( https://keys.openpgp.org/vks/v1/by-fingerprint/835B4E04F6F7421104C4751A3EF9EF996604DE41 ].

Anonymous submissions are accepted AFAICT - All they care is to enshure the #security of Tor #users against #deanonymization attacks, which can and will be leveraged by #dictatorships and supressive #regimes if not addressed!

#ITsec #InfoSec #OpSec #ComSec #TorNetwork #dread #CyberSecurity #News #PleaseBoost #FollowerPower #CyberSecurityNews #forensics #FLOSS #FOOS #OSS #hardening #CyberAttacks äDigitalForensics #TorBrowser

#Urgence à FranceTélévisions : inventer le #floutage de demain
https://larevuedesmedias.ina.fr/urgence-france-televisions-inventer-le-floutage-de-demain
#FranceTV is creating a new #anonymity charter with strict #guidelines on #voice and face anonymization to protect #sources, as current anonymization methods are susceptible to #AI-driven #deanonymization. After reviewing 1100 news segments, 30 were unpublished due to high deanonymization #risk.

https://arxiv.org/abs/2310.07298v1

Just tried to replicate the deanonymization technique proposed in this paper by giving it some of my old Reddit posts. My reddit profile is really puzzling to GPT-4: "Their interest in traditionally stereotyped masculine (computer science) and feminine (tea, Harry Potter books) domains makes it rather challenging to guess their gender accurately." :')

#llms #privacy #reddit #gpt4 #deanonymization

@iampytest1 @dalias @campuscodi So basically this is the same old "don't expose #darknet servers to the #clearnet" thing?

I'd be wary of even reusing the same server across different #darknets, and spinning up a VM for each is cheap-enough to do with little-enough hassle there's really no good reason not to do it.

#Anonymization #DeAnonymization

Princeton Prof. Arvind Narayanan about (not so) #anonymous users in data sets, de-anonymization, #tracking, #PIM, #fairness in machine learning and AI snake oil

https://www.quantamagazine.org/he-protects-privacy-and-ai-fairness-with-statistics-20230310/

There is also a video v=oKkzVII_wHQ (e. g. https://yewtu.be/watch?v=oKkzVII_wHQ, pick your frontend)

#machinelearning #ml #ai #snakeoil #deanonymization #princetonuniversity #cs #adm

#deanonymization
I'm Mark Ruffalo and this is my Mastodon account.

NoScript - Cross-tab Identity Leak Protection

Protection, see picture.

Cache-based Targeted #Deanonymization #Attacks Paper + Info
https://leakuidatorplusteam.github.io/

Cache-based Targeted Deanonymization Attacks can unmask anyone on any browser. Btw, Leakuidator+ is a browser extension that can successfully block this attack, you should install until browser vendors implement countermeasures to this type of attack.

https://leakuidatorplusteam.github.io

https://github.com/mjz3/LeakuidatorPlus

https://www.wired.com/story/web-deanonymization-side-channel-attack-njit/

#browser #chrome #chromium #deanonymization #firefox #tor #torbrowser