So, I guess most of you know that the true identity can be revealed if somebody controls the entry and the exit node of your Tor-connection.
Let´s say I´m connecting first to an encrypted VPN Server which keeps no logs and then to the Tor-network, then my identity should be safe from a basic correlation attack. However, if somebody with a lot of power (e.g the government) is spying on me they can request the logs of my ISP and see that I am connected to a specific VPN server (which is irrelevant since they keep no logs) and how much bandwith I requested at what exact time. In theory this means, the government could still make a correlation attack while ignoring my VPN Server by combinging the ISP logs and the timing/bandwidth used from the exit node.
But what if I had an inconsistent noise of dataflow combined to my surfing over Tor? Let´s say I load inconsistently a 144px YouTube video on my Firefox over my VPN while surfing on the Tor Browser. My ISP would see a semi-constant timings of data flowing to me and they would see video bandwidth + Tor bandwidth. However, they could not distinguish one from another which would make a correlation attack basically impossible.
Is this correct or am I missing something major?