Bad news folks. There is a new attack that can unmask Tor clients remotely, and discover tor hidden services. This is truly impressive. The attack is called Global Passive Adversary, and it uses a type of denial of service and network observability to entirely reverse the routes. This amazing breakthrough was brought by Angelos Keromytis and Sumbuddho Chakravarty. Download the slides here. Rememer how I was talking about you could "buy" the integrity of the Tor network through creating more nodes? This is a way to do it without having to even have them on your circuit. How to defeat this attack right now: If you are using Tor, enter using a Bridge.