Understanding Tor Onion Services and Their Use Cases

Guard Discovery Attack (1/2)
Attacker wants to learn the guard of an onion service, and has
signed up a few middle relays on the network:
●
The attacker can force the onion service to create Tor circuits.
●
The attacker can figure out if her middle node was picked on a
circuit.
Attacker learns guard node in use