How is TCP any more anonymous than UDP or ICMP?

Marsh Posté le 12-07-2011 à 15:50:16

Hello,

I started reading "Hacking Exposed" (v6) and at some points, the authors say:

Spoiler :

"Now that he [i.e. the hacker] has your web server and associated domain name, he is going to want to
resolve this information to a specific IP address. Rather than just using something like
the host command, which will give away his location, he uses tor-resolve, which is
included with the Tor package. Joe Hacker knows it is critically important not to use any
tools that will send UDP or ICMP packets directly to the target system. All lookups must
go through the Tor network to preserve anonymity."

Can someone explain to me what they mean by "it is critically important not to use any
tools that will send UDP or ICMP packets directly to the target system."? What is the technical explaination?

I don't see how UDP or ICMP is less anonymous than TCP, unless they say that because of Tor (which works on top of TCP)? It's been driving me crazy!

Thanks for your help.

Marsh Posté le 12-07-2011 à 15:50:16

Marsh Posté le 12-07-2011 à 23:32:25

I'm sorry but it's a French forum so we speak french.
There are plenty of very good techical forums in english, I can only encourage you to post there

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed

Name *

Email *

URL

Message *