Check out the new USENIX Web site. next up previous
Next: Future Work Up: Limitations and threats Previous: Threats to publisher anonymity

``Rubber-Hose cryptanalysis''

Unlike Anderson's Eternity Service [2] Publius allows a publisher to delete a previously published document. An individual wishing to delete a document published with Publius must possess the document's URL and password. An adversary who knows the publisher of a document can apply so called ``Rubber-Hose'' Cryptanalysis [21] (threats, torture, blackmail, etc) to either force the publisher to delete the document or reveal the document's password. Of course the adversary could try to force the appropriate server administrators to delete the Publius Content he wants censored. However when Publius Content is distributed across servers located in different countries and/or jurisdictions such an attack can be very expensive or impractical.

Avi Rubin
2000-06-13