Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why the Tor attack matters

blog.cryptographyengineering.com

Post reply on HN
Print view View original

31–40 of 77 posts

Re: Why the Tor attack matters

#31

Post by tptacek »

AMEDICALRe wrote: post #30
hawkice wrote: post #27

Earlier quoted context omitted.

This is perhaps the most unnecessarily rude comment to be at the top of a hacker news thread in some time. Let's all remember that disagreeing with someone doesn't mean being glib or mean.

As a serious academic researcher with a research group has access to amount of data/computing power that we can make NYTIMES headline effortlessly if we were to throw our ethics out of the window, Let me tell you this isn't a fucking joke. Patio11 who seems to be darling of this forum, has no clue what he is talking about. He seems to have never participated in any kind of academic research. Unlike some stupid bingo…

Anonymous random new account, I don't know how intimidated you think I'm going to by whatever your academic credentials will turn out to be when you reveal them, but nobody I know in security research is talking about this Tor work the way you are, or would take umbrage at what Patrick said. Patrick knows what he's talking about.

Re: Why the Tor attack matters

#32

Post by [deleted] »

[deleted] wrote: post #29
hawkice wrote: post #27

Earlier quoted context omitted.

This is perhaps the most unnecessarily rude comment to be at the top of a hacker news thread in some time. Let's all remember that disagreeing with someone doesn't mean being glib or mean.

[deleted]

[deleted]

Re: Why the Tor attack matters

#33

Post by [deleted] »

hawkice wrote: post #27
AMEDICALRe wrote: post #6

The response by Patio11 regarding how this was acceptable penetration testing was beyond stupid. Just because you are univesity researcher does not means you can take money and then attack some random company and say LOL JK just doing "Research". Universities have enormous computing power / resources available via various means to do research. Just because I have access to a thousand node cluster does not means I can…

This is perhaps the most unnecessarily rude comment to be at the top of a hacker news thread in some time. Let's all remember that disagreeing with someone doesn't mean being glib or mean.

[deleted]

Re: Why the Tor attack matters

#34

Post by AMEDICALRe »

tptacek wrote: post #31
AMEDICALRe wrote: post #30

Earlier quoted context omitted.

As a serious academic researcher with a research group has access to amount of data/computing power that we can make NYTIMES headline effortlessly if we were to throw our ethics out of the window, Let me tell you this isn't a fucking joke. Patio11 who seems to be darling of this forum, has no clue what he is talking about. He seems to have never participated in any kind of academic research. Unlike some stupid bingo…

Anonymous random new account, I don't know how intimidated you think I'm going to by whatever your academic credentials will turn out to be when you reveal them, but nobody I know in security research is talking about this Tor work the way you are, or would take umbrage at what Patrick said. Patrick knows what he's talking about.

Dude the fact that nobody you know is worried should be the first clue that something is really wrong or you are hanging out with wrong people. Security, Privacy & Data Mining research are ripe for bureaucratic takedown. Incidences like these will only lead to harsher requirements and stifle future research. Its essential for the security community to police itself. As far as Patrick knowing what he's talking about I do not take anyone who has never published a research article, let alone an abstract seriously.

We have access to hundred of millions of medical records, if were to throw away integrity, ethics and morality out of the window. The results would be spectacular enough to warrant a front page news in all major newspapers. And it would completely destroy any future medical research in this field, since we would have betrayed public trust.

Oh and guess what we are exempt from IRB. The true reality is that research to a large extent cannot be completely controlled / monitored. It is thus extremely essential for a research community to hold itself to some ethical standards.

Re: Why the Tor attack matters

#35

Post by [deleted] »

AMEDICALRe wrote: post #6

The response by Patio11 regarding how this was acceptable penetration testing was beyond stupid. Just because you are univesity researcher does not means you can take money and then attack some random company and say LOL JK just doing "Research". Universities have enormous computing power / resources available via various means to do research. Just because I have access to a thousand node cluster does not means I can…

[deleted]

Re: Why the Tor attack matters

#36

Post by tptacek »

AMEDICALRe wrote: post #34
tptacek wrote: post #31

Earlier quoted context omitted.

Anonymous random new account, I don't know how intimidated you think I'm going to by whatever your academic credentials will turn out to be when you reveal them, but nobody I know in security research is talking about this Tor work the way you are, or would take umbrage at what Patrick said. Patrick knows what he's talking about.

Dude the fact that nobody you know is worried should be the first clue that something is really wrong or you are hanging out with wrong people. Security, Privacy & Data Mining research are ripe for bureaucratic takedown. Incidences like these will only lead to harsher requirements and stifle future research. Its essential for the security community to police itself. As far as Patrick knowing what he's talking about I…

I'm not sure what the last part of your first paragraph was supposed to mean, but if I wanted to compare my own computer security cite record with yours, would I search scholar.google.com for "AMEDICALRe"?

You've misread Patrick's messages to spectacular effect, leaving me with the impression that you were simply champing at the bit to jump at him and his silly bingo card site.

Tor chose world governments as their adversary, and if $1MM was all it took to buy unmasking of users, they failed. That's important information, and regardless of CMU's ethics (and I think this was an ethical lapse), the revelation that there is or was a flaw of that scale is a service to the Internet.

Re: Why the Tor attack matters

#40

Post by tptacek »

AMEDICALRe wrote: post #6

The response by Patio11 regarding how this was acceptable penetration testing was beyond stupid. Just because you are univesity researcher does not means you can take money and then attack some random company and say LOL JK just doing "Research". Universities have enormous computing power / resources available via various means to do research. Just because I have access to a thousand node cluster does not means I can…

If you had cut the ridiculous and mean first sentence out of this comment it would have been fine, but then, as you know, nobody would have cared about it, because you'd have been saying nothing everyone else hadn't already been saying.
Post reply on HN