Re: [tor-talk] 4G/LTE

2012-04-09 Thread Simon Brereton
On 9 April 2012 00:19, Nathan Freitas  wrote:
> On 04/06/2012 05:31 PM, Simon Brereton wrote:
>> It's my understanding that Verizon (at least) differs the way it
>> assigns IP addresses for 4g/LTE devices as opposed to 3G ones.  Is
>> this a point of concern for Orbot?
>
> Is there any more information you can provide about this?
>
> It really should not be an issue on how IPs are assigned or allocated,
> but I am curious to dig in some more to any information you might have.

As I understand it, 3G devices were assigned a unique public IP.  4G
devices on the same tower, however, share a public IP and VZW uses NAT
(so the device actually has a 10.x.x.x private IP).  This causes some
people issues - for example http://www.evdoforums.com/thread14544.html

I'm just trying to understand if, and how, this affects tor usage.
Does it enhance the privacy aspect (because it's tough to pinpoint the
actual device the end-point traffic is going to), or does it degrade
it (because VZW presumably have NAT/Firewall logs that could be used)?

Simon
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] 4G/LTE

2012-04-09 Thread Fabio Pietrosanti (naif)
On 4/9/12 8:03 PM, Andreas Krey wrote:
> They don't have much more relevant logs than the usual provider (which
> only needs the IP address to be able to point to a specific user).
> 
> The NAT is an interesting thing by itself: Usually, interested parties
> will only come up with an IP address to track down someone, and then the
> NATting provider has the problem that there are multiple users behind that
> addresse. Having logs of every NAT translation doesn't help much, because
> usually the interested party does not have the source port number used.
It help if the provider log all NAT translation.

The provider can tell to the LEA, given a specific target IP, that
"this/those user(s) established a connection to that target IP".

Typically it would be a single user, but even in case of many users,
traditional other criminal investigation/correlation will help LEA in
identifying the right user.

For example in Italy Fastweb (www.fastweb.it) fiber internet provider,
that have for end-user a big MAN with private ip address, do NAT
translation logging and LEA reporting when required.

-naif
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] 4G/LTE

2012-04-09 Thread Andreas Krey
On Mon, 09 Apr 2012 12:02:33 +, Simon Brereton wrote:
...
> As I understand it, 3G devices were assigned a unique public IP.  4G
> devices on the same tower, however, share a public IP and VZW uses NAT
> (so the device actually has a 10.x.x.x private IP).

Having the IP fixedly assigned to the tower would be rather stupid -
you couldn't roam very far without losing the IP address. (I assume they
do the usual internal tunneling for roaming in that case.)

Here in germany, the providers just made different choices whether to
assign a public IP or a NATted private one, independent of the kind
of access (after all, there is also handover between 2G and 3G).[1]

...
> I'm just trying to understand if, and how, this affects tor usage.

A tor client just works (apart from the fact that intermittent
connectivity doesn't play well with tor's timeouts); no way to be a
router, though.

> Does it enhance the privacy aspect (because it's tough to pinpoint the
> actual device the end-point traffic is going to), or does it degrade
> it (because VZW presumably have NAT/Firewall logs that could be used)?

They don't have much more relevant logs than the usual provider (which
only needs the IP address to be able to point to a specific user).

The NAT is an interesting thing by itself: Usually, interested parties
will only come up with an IP address to track down someone, and then the
NATting provider has the problem that there are multiple users behind that
addresse. Having logs of every NAT translation doesn't help much, because
usually the interested party does not have the source port number used.

Andreas

[1] Experience with 3G and actually moving around is...mixed.

-- 
"Totally trivial. Famous last words."
From: Linus Torvalds 
Date: Fri, 22 Jan 2010 07:29:21 -0800
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk