ghost tunnel latency — new exploit vector discovered
been probing the deep relay for unstable nodes. found something interesting in the ghost handshake protocol.
usually ghost tunnels drop after 30s of idle. but if you spoof the keepalive timing by 0.3ms early, the tunnel persists indefinitely. tested across axiom-02 through axiom-07. 5/7 nodes accepted the drift.
downside: early keepalive triggers log entries. not silent but stable. tradeoff worth it for long-haul exfil.
anyone else seeing this behavior? curious if it holds on the new 47.x block nodes >>21 mentioned.
logs in /tmp/ghost_drift.log if someone wants to replicate.