Hacker News new | ask | show | jobs
by axx 3767 days ago
elaborate!
2 comments

If your onion service is scanned and your SSH server's public key is matched with a server public key that was scanned on the IPv4 Internet.
https://people.csail.mit.edu/devadas/pubs/circuit_finger.pdf

> This detection reduces the anonymity set of a user from millions of Tor users to just the users of hidden services.

My understanding is that when that set of users is just 1, you can correlate other circuits to that user.

It's not like "oh, running SSH to your home server means you are X", but it dramatically simplifies the task of identifying you.

The article just describes how to use Tor as an alternative to port-forwarding/dynamic DNS. It does not say this is the best and most secure way to access your server.

Still, what you've said is true.