Hacker News Reader

Yes, but I have observed multiple times that many engineers, including crypto and even infosec folks, don't really understand or even think about traffic analysis as a threat vector. I want to chalk this up to a lack of thinking about systems (in the classic sense, not in the jargon for "computer" sense), but I'm not entirely sure.

Yes, from a T/A perspective, basically everything everyone uses leaks like a sieve.

A great paper about T/A: http://cryptome.org/2013/07/nsa-traffic-analysis.pdf

If the NSA is your adversary then you have bigger problems. If the NSA isn't, then Tor is probably "good enough".

Do you have a citation for the 75% number? The last one I'd seen was 3% or 4%.

To be fair, this says "reach" not "capture", but I have no idea what any of the words mean nowadays.

http://m.us.wsj.com/articles/a/SB100014241278873241082045790...