Jan 18, 2026
How does OnionBalance change the attacker model for distributed ISP-level correlation, and what operational limits remain?
The recent SUMo flow-correlation work models a realistic, federated coalition of ISPs that can deanonymize Tor onion service sessions by distributing traffic-analysis workload across monitored vantage...