Fingerprinting nodes via addr requests

This blog post comes from the research of @naiyoma and me. It is currently possible to identify nodes running on multiple networks by analyzing their ADDR responses. Below, we’ll share highlights from our attack attempts - while deliberately avoiding too much detail about the methodology - and discuss some possible solutions. This fingerprint attack can hurt network privacy and enable more…