<r​ucknium:monero.social> Shi et al. (2024): "Conclusion 2: If a malicious Monero Tor hidden service node receives a transaction from an incoming Monero Tor hidden service peer, then the transaction originates from the incoming peer."

<r​ucknium:monero.social> Maybe I'm missing something. I don't understand how they are concluding this. Some of those txs can just be normal gossip protocol txs that are propagated from other nodes instead of truly originating from the node that relays them.

<r​ucknium:monero.social> "According to Monero nodes’ configuration of Tor, we classify Monero nodes into the following three types: ordinary nodes, Tor client nodes, and Tor hidden service nodes..." What is the difference between a Tor client node and a Tor hidden service node?

<r​ucknium:monero.social> An adversary can guess the node origin of txs when only the gossip protocol is used, but you need a lot of sybil node connections surrounding the nodes whose txs you are trying to find the origin of. AFAIK, you cannot guess from just having one connection to the node whose txs you are trying to find the origin of.

<r​ucknium:monero.social> Assume that an adversary were using sybil connections to execute this type of attack. Would using Dandelion++ for Tor tx propagation fix this issue?

<r​ucknium:monero.social> The paper seems to not discuss countermeasures, but some countermeasures are probably in the Bitcoin article that they cite: Gao et al. (2021) "A Two-Stage Deanonymization Attack Towards Bitcoin Hidden Service Nodes" : ieeexplore.ieee.org/document/9781065

<b​oog900:monero.social> > I don't understand how they are concluding this. Some of those txs can just be normal gossip protocol txs that are propagated from other nodes instead of truly originating from the node that relays them.

<b​oog900:monero.social> I think transactions are only sent over Tor if they originate from the local node, other txs are not. When the Tor nodes receive the txs they are then relayed over clear net, not sent over Tor again.

<b​oog900:monero.social> > What is the difference between a Tor client node and a Tor hidden service node

<b​oog900:monero.social> clients can only make outbound connections to Tor nodes, hidden service node can have outbound and inbound