diff --git a/assets/img/mulligan_sec.jpeg b/assets/img/mulligan_sec.jpeg new file mode 100644 index 0000000..079f0dd Binary files /dev/null and b/assets/img/mulligan_sec.jpeg differ diff --git a/opsec/high_availability/attack_diagram.dia b/opsec/high_availability/attack_diagram.dia new file mode 100644 index 0000000..f4f6faa --- /dev/null +++ b/opsec/high_availability/attack_diagram.dia @@ -0,0 +1,1759 @@ + + + + + + + + + + + + + #A4# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #HA server 1 +Alice's house# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #HA server 2 +Bob's house +# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #network attack# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #Observer# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #Service is still up, +attacker thinks it isn't hosted +at Alice's# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #ISP Layer# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #HA server 1 +Alice's house# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #HA server 2 +Bob's house +# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #network attack# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ## + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #Observer# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #ISP Layer# + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + #Service is still up, +attacker thinks it isn't hosted +at Bob's# + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/opsec/high_availability/attack_diagram.svg b/opsec/high_availability/attack_diagram.svg new file mode 100644 index 0000000..c1a3b7a --- /dev/null +++ b/opsec/high_availability/attack_diagram.svg @@ -0,0 +1,653 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/opsec/high_availability/ha_attack_flow.png b/opsec/high_availability/ha_attack_flow.png new file mode 100644 index 0000000..455ccbe Binary files /dev/null and b/opsec/high_availability/ha_attack_flow.png differ diff --git a/opsec/high_availability/index.html b/opsec/high_availability/index.html new file mode 100644 index 0000000..d86e132 --- /dev/null +++ b/opsec/high_availability/index.html @@ -0,0 +1,235 @@ + + + + + + + + + + + Why is High Availability Important for Deniability ? + + + + + + + + + + + + + + + + + + + +
+
+
+ + The Nihilism Blog +
+
+ +
+ +
+
+ + + +
+
+
+
+ Previous Page

Mulligan Security - 30 / 12 / 2024

+

+

Why is High Availability Important for Deniability ?

+ +The concept of high availability is omnipresent in centralized services. One expects their ISP to provide internet access, their email provider to give them 100% uptime whenever they want to send an email and so on.

+ + High-availability, the ability to provide high-uptime infrastructure, also has far-reaching implications for OPSEC practitioners.

+When an adversary wants to collect information such as physical location behind a hidden service, depending on their power they will use downtime as an indicator in order to progressively narrow the pool of potential service location until they can act decisively against the remaining suspects. + +

+Anonymity IS a requirement for deniability
+Being able to plausibly deny being the operator of, or a downstream service supplier to a hidden service is a significant boon to personal protection. +

+ +
+
+
+
+ +
+
+
+
+

+

Threat model

+ +In order to understand how high availability, or lack thereof, impacts our security posture me must first define the skills and abilities of our adversary. For this tutorial the adversary has the following attributes: +

+ +
    +
  • Ability to monitor the hidden service status and know rapidly if it goes offline
    • +
  • Ability to directly tamper with either the power grid or the internet infrastructure with high granularity (DSLAM level, which could be a small town or a group of city blocks)
    • +
  • Ability to monitor the effects of tampering or incidents impacting the power grid or the internet infrastructure
    • +
+ + +A concrete example of such an adversary would be law enforcement and government agencies. + +

+ +
+
+
+
+ + +
+
+
+
+

+

Attack Scenario

+ +The adversary has identified a probable city of residence for the administrator of a hidden service. In order to narrow down their search perimeter they will do the following: + +
+ +
    +
  1. Target 1 group of city block and send someone to the internet backbone for this city block to cut it off from the internet
    2. +
  2. Check whether the onion service is still up
    3. +
  3. If it goes down, add it to the suspect pool
    4. +
+ +

+ +
+
+
+
+ + +
+
+
+
+

+

How can high availability help?

+In the above scenario if the onion service operator had setup a redundant, highly available server then connections would have been seamlessly sent to another server in the redundancy pool, thus preventing the adversary +from extracting location information based on their operation. This works best with a server in a different country or region, making a coordinated attack by several adversaries a requirement in order to use this method for deanonymization. + +

+ +
+
+
+
+ +
+
+
+
+

+

Adversary Attack Flow

+Below is a chart depicting an adversary attack flow. As shown, high availability will prevent the adversary from progressing beyond their initial step of uptime-based target acquisition. +
+
+ +
+ +As you can see the adversarie's playbook is quite simple: +

+
    +
  1. Identify a list of potential suspects
    2. +
  2. Cut them off the internet
    3. +
  3. Check whether this action made the hidden service unreachable
    4. +
+ + +Those actions are easily perpetrated by law enforcement as they only require:
+
    +
  • DSLAM level access to the internet backbone used by the suspects (impacting a perimeter like a city block)
    • +
  • City block level access to the power grid in order to run disruptive actions
    • +
+
+Both of those are trival to obtain for LEOs (law enforcement officers). + +

+ + + +
+This Diagram shows where the attack takes place and how a redundant setup prevent such attacks from confirming the physical location of the hidden service. +
+
+In conclusion, your hidden service is one downtime away from having its location disclosed to an adversary, so you need to make sure it has High Availability +

+ +
+
+
+
+ + + + +
+
+
+
+

Nihilism

+

+ Until there is Nothing left.



Creative Commons Zero: No Rights Reserved
+ +

+
+ +
+

My Links

+

+ + RSS Feed
SimpleX Chat
+ +

+
+ +
+

About Mulligan Security

+

Donate XMR:
86NCojqYmjwim4NGZzaoLS2ozbLkMaQTnd3VVa9MdW1jVpQbseigSfiCqYGrM1c5rmZ173mrp8RmvPsvspG8jGr99yK3PSs


Contact: mulligansecurity@riseup.net
website

+ +
+ +
+ +
+
+ + + + + + + diff --git a/opsec/index.html b/opsec/index.html index 6dfe4ce..efffe92 100644 --- a/opsec/index.html +++ b/opsec/index.html @@ -342,7 +342,7 @@

🧅 Serverside - High Availability for Deniability (⚠️ Remote Hosting = Safer!)

    -
  1. ❌ Why is High Availability Important for Deniability ?
    2. +
  2. ✅ Why is High Availability Important for Deniability ?
  3. ❌ How to setup a basic NGINX / PHP / MySQL app
  4. ❌ How to setup a MySQL Master-Master replication over Tor
  5. ❌ OnionBalance for .onion domains load balancing