Forcing malicious Tor guards in thirty minutes

CyberPodcast · Jun 23, 2026 · 1h 2m

This episode explores a stealthy de-anonymization attack against the Tor network, based on the paper "A Stealthy Attack Against Tor Guard Selection". The podcast details how an adversary can drastically reduce the time it takes to compromise a specific user's entry guard.Normally, Tor clients stick with the same guard nodes for 30 to 60 days to prevent profiling attacks. However, this episode explains how a localized attacker, such as a malicious ISP or network administrator, can manipulate a user's connections by systematically blocking their legitimate guard nodes. This forces the Tor…