FINDING · DEFENSE

The hybrid two-stage design's architectural vulnerability is that circumventing either stage independently defeats the system: end-users can tunnel via Tor or JAP to bypass both stages entirely, while content providers can serve different content to IWF crawlers versus real users, exploiting the fact that only 33% of IWF hotline reports were substantiated as potentially illegal. The system's precision is entirely contingent on content-provider cooperation, which cannot be assumed.

From 2006-clayton-failures — Failures in a Hybrid Content Blocking System · §4, §6 · 2006 · Privacy Enhancing Technologies

Implications

Multi-stage blocking pipelines should be evaluated assuming adversaries attack the weakest link; composing two independently weak mechanisms does not produce a strong system.
Circumvention proxies should actively probe their own infrastructure from client-visible vantage points to detect behavioral asymmetries that could be exploited for blocklist oracle attacks before adversaries do.