Lecture 8 Flashcards
What’s a VPN relay?
A server ran by someone which relays your traffic over the internet. This guards your IP adress
What could be a risk with VPN?
The VPN are often free and can actually be the adversary. Using a VPN says “I got something to hide”
What’s the next step after VPN but before TOR?
iCloud private relay and/or Google IP-protection
What does iCloud Private relay and Google introduce to improve the security?
Egress and ingress (Servers). All traffic will be encrypted to ingress-server relay which then encrypts it. In that connection you build another TLS connection to egress provider (apple or google), from there the traffic will go out on the internet.
What does the egress and ingress know/not know about the traffic?
Egress will not know who you are because the traffic comes from google or apple but will know where the traffic should go. Ingress knows who you are but not where you’re going
What are the three relays in TOR?
Guard, Middle, Exit
How does the TOR network design provide stronger anonymity?
The TOR network design starts with the Guard relay guarding the user’s identity (IP address), followed by a middle relay that only sees the encrypted connection from the guard to the exit relay. This design, involving nodes within the TOR network, enhances anonymity. Obvious men men
What is the main contrast between TOR and services like Google and Apple in terms of server locations?
Unlike Google and Apple, which need servers in specific locations, TOR servers could pop up worldwide. The nodes in TOR are part of a volunteer-run network, providing a global and decentralized infrastructure.
What are three use cases for TOR?
Anonymous web browsing, preventing tracking and avoid censorship.
Why does the guard relay not change in a TOR circuit?
The guard relay remains stable in a TOR circuit to ensure a consistent identity. Users select two or three guard relays during installation, which remains constant to avoid potential compromise based on the user’s country.
How does TOR address censorship in certain countries?
TOR introduces bridges, which are relays not listed in public directories. Bridges help users in censored countries access the TOR network without being blocked.
What is the purpose of Onion Services in TOR?
Onion Services allow hosting on the Dark Web. Instead of a circuit to an online server, the service is hidden behind a circuit. It uses a Curve22519 key as an address, providing end-to-end encryption and eliminating the need for HTTPS and DNS.
What is the new challenge in network security against IP addresses?
The new challenge involves hiding patterns in encrypted network traffic against AI, which employs pattern recognition.