Re: Device Fingerprinting

In the thesis abstract the claim is made that their techniques work 
against systems using NTP. It wouldn't be much of a Ph. D. project if it 
didn't.

The abstract is at: 
http://www.caida.org/outreach/papers/2005/fingerprinting/index.xml

Checking out the full paper, it seems that these folks have linear 
analysis method that can accommodate BSD and Linux style NTP update 
daemons. However, it looks to me like this method might run into trouble 
when trying to identify one system out of thousands or millions. Their 
sample size was not that large. Also, they reported that laptop clock skew 
was effected by battery vs AC power, so there's another wrinkle.

Jeff Furgal
[email protected] 





Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]> 
Sent by: [email protected]
03/08/05 04:18 PM

To
Adam Duck <duck-jNDFPZUTrfROceuj71AUlOGSygy492AeG9Ur7JDdleE@public.gmane.org>
cc
[email protected]
Subject
Re: [freenet-chat] Device Fingerprinting






This _IS_ a timing attack. And it was discussed just recently on this
list. At present Freenet never communicates absolute timestamps, and the
attack seems to be mainly aimed at NATs.

Can this be used if NTP is installed to keep the clock synchronized?

On Tue, Mar 08, 2005 at 10:47:02AM +0100, Adam Duck wrote:
> Hello freenetters,
> 
> http://www.zdnet.com.au/news/security/0,2000061744,39183346,00.htm
> 
> could this be a possible threat to freenet's anonymity?  Perhaps in
> conjunction with a timing-attack?
> 
> bye, Adam.
-- 
Matthew J Toseland - toad-EI5O+8PHWbJeeLb3ft/[email protected]
Freenet Project Official Codemonkey - http://freenetproject.org/
ICTHUS - Nothing is impossible. Our Boss says so.
_______________________________________________
chat mailing list
[email protected]
Archived: http://news.gmane.org/gmane.network.freenet.general
Unsubscribe at 
http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/chat
Or mailto:[email protected]?subject=unsubscribe

_______________________________________________
chat mailing list
[email protected]
Archived: http://news.gmane.org/gmane.network.freenet.general
Unsubscribe at http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/chat
Or mailto:[email protected]?subject=unsubscribe

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCLiS7HzsuOmVUoi0RAqlxAJ0bgtUhuq85icA9GF1WXHCuTgFl/QCfVc2L
bUY/kC1Oae7m0jFFhVy3JdU=
=n9fW
-----END PGP SIGNATURE-----