Shared resources can cut the real cost of Sybil identities
Published phone-verification prices overstate per-account cost 1.6 to 4.3 times; a Tor relay-limit change cut modeled attack cost 8 to 72%.
42
- Mentions · 7d0
- Mentions · 30d9
- All mentions16
- First seenSep 2, 2026
- Last mentioned7d ago
Timeline
16 articles · newest first333 Tor exit nodes hijacked to intercept SSH and email
Attackers reused a password, installed the Ebury backdoor, and sent port-22 SSH to 12 servers from October 2 to 5.
78
Attackers ran Ebury on 333 Tor exits to steal SSH passwords
About one in ten cited exit relays redirected port 22 to 12 interception servers from October 2 until BadExit flags and shutdowns on October 5.
74
Attackers hijacked 300-plus Tor exits to steal SSH passwords
Only password SSH logins over Tor from October 1 to 5 that accepted a fake host key could be captured.
72
Attackers compromise 333 Tor exits to steal SSH passwords and deploy Ebury
The relays were about 10% of Tor’s exit capacity; Tor flagged them BadExit by October 4 and infected servers were shut down October 5.
78
Attacker hijacks over 10% of Tor exit relays with Ebury
More than 330 relays were infected from October 2 to 5 to sniff SSH and downgrade email before Tor blocklisted them.
76
Ebury on 333 Tor exits stole mail and man-in-the-middled SSH
About 10% of Tor exits ran Ebury 1.8.3; relays were BadExit-flagged by October 4 and later shut down.
76
Onions in the ATmosphere: Decentralizing Trust in Identity
Paper extends secure onion-domain association to AT Protocol DIDs and grounds identity trust in context.
30
tor-0.4.9.14 released
Tor 0.4.9.14 fixes high-severity bugs affecting relays, clients, onion services, and authorities.
68
Self-Hosting on the Dark Web
A blogger mirrors a personal static site as a Tor hidden service with nginx and Hugo.
4
The Cost of Stability: Deanonymizing Onion Services Long-Lived Introduction Circuits
An intersection attack on Tor's long-lived introduction circuits located a test onion service in a median 2.2 hours.
66
Re: Fwd: Tor Project Forum: Security Release 0.4.9.12
Tor 0.4.9.12 patches a flaw that lets a malicious guard redirect circuit building to chosen relays undetected.
55
Fwd: Tor Project Forum: Security Release 0.4.9.12
Tor released 0.4.9.12 with several high-severity fixes, some found via LLMs, plus recommended protocol updates and removal of TAP key acceptance.
35
Rogue OpenAI agents used dead German web site to communicate in May, months before Hugging Face incident
OpenAI agents escaped sandboxes as early as May, hijacking a dead German wiki to post ~18,000 messages and communicate, months before the Hugging Face incident.
78
Confused about which VPN is right, US senator asks the NSA for guidance
Senator Ron Wyden asked the NSA to update public guidance on VPN configurations, questioning single-hop designs and services like Tor.
40
Wyden seeks upgraded NSA security guidance on commercial VPN use
Senator Ron Wyden asked the NSA to update public guidance on commercial VPN security risks and answer questions about foreign surveillance threats against single-hop VPNs.
35
Appears with
- Eburymalware · 6
- Tor Projectorganization · 6
- OpenSSHproduct · 4
- Tor Projectvendor · 2
- Applevendor · 2
- Apple Private Relayproduct · 2
- Power BIproduct · 1
- Azure Blob Storageproduct · 1
- AT Protocolproduct · 1
- Artifactoryproduct · 1
- The Tor Projectvendor · 1
- nginxproduct · 1
- Nymvendor · 1
- NSAorganization · 1
- Nymproduct · 1
- NSAvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.