onion services are vulnerable to a resource exhaustion attack that Tor can't patch

Thanks for watching ❤️ JOIN THE DISCORD! 👉   / discord   A group of security researchers just developed a new family of attacks dubbed OnionFlation, that turn tors denial of service defense mechanism against its own users. This enables attackers to essentially bring down any onion service of their choosing. This class of attacks actually takes advantage of an asymmetry in onion routing, which reveals a persistent issue facing the tor network. As a result, these types of attacks are difficult to properly patch or defend against. I use my own Onion Service to demonstrate the principals of this attack in real time. Onions Got Puzzled Paper & Presentation: https://www.usenix.org/conference/use... Sources: https://blog.torproject.org/introduci... https://blog.torproject.org/tor-netwo... https://onionservices.torproject.org/... https://spec.torproject.org/proposals... https://spec.torproject.org/proposals... 0:00 – Intro 1:00 – Background 3:14 – Clearnet Onion Routing 4:51 – DEMO 1: Clearnet Circuit 5:13 – Onion Service Routing 10:26 – DEMO 2: Onion Service Circuits 13:38 – Regular DoS Attacks 15:29 – PoW Puzzles 18:49 – OnionFlation Attacks 26:11 – DEMO 3: ONIONFLATION ATTACK 39:52 – Patched? Not Yet... MUSIC CREDITS: LEMMiNO - Cipher    • LEMMiNO - Cipher (BGM)   CC BY-SA 4.0 LEMMiNO - Firecracker    • LEMMiNO - Firecracker (BGM)   CC BY-SA 4.0 LEMMiNO - Nocturnal    • LEMMiNO - Nocturnal (BGM)   CC BY-SA 4.0 LEMMiNO - Siberian    • LEMMiNO - Siberian (BGM)   CC BY-SA 4.0 LEMMiNO - Encounters    • LEMMiNO - Encounters (BGM)   CC BY-SA 4.0 LEMMiNO - Aloft    • LEMMiNO - Aloft (BGM)   CC BY-SA 4.0 LEMMiNO - Blackout    • LEMMiNO - Blackout (BGM)   CC BY-SA 4.0 #software #computerscience #code #hacking #cybersecurity #exploit #vulnerability #pentesting #privacy #malware #cyber #cybersecurity #backdoor #hacked #cyberattack #tor #torbrowser #onionrouting #deanonymize #darknet #torrelay #censorship #surveillance #tracking #firewall #networking #leak #digitalID #onionflation #deepweb #darkweb #kali #linux