Useless web site. Can anybody please post the text of the article so that it is readable??
Yes, it's absolutely horrendous on mobile. On my laptop it's fine.
Detailing the CMU Tor Hidden Services Attack and Tor's Response
11–19 of 19 posts
Re: Detailing the CMU Tor Hidden Services Attack and Tor's Response
#12Useless web site. Can anybody please post the text of the article so that it is readable??
[deleted]
Re: Detailing the CMU Tor Hidden Services Attack and Tor's Response
#13Useless web site. Can anybody please post the text of the article so that it is readable??
http://pastebin.com/6938UxS0
TL;DR (2014):
Feb: Understaffed Tor minimized security warning. "Activity in the past has looked suspicious at the time, but ultimately did stuff that helped advance our art."
May: CMU researchers announce breaking Tor, ignoring potential ethical violations. Blackhat talk cancelled; CMU & FBI begin 'not the droids you're looking for' responses.
Jul: Emergency fix to Tor to block CMU vulnerability. CMU researchers stop corresponding with Tor project.
Nov: FBI crackdown
Re: Detailing the CMU Tor Hidden Services Attack and Tor's Response
#14Support Tor's first donation campaign. Become a crowdfunder. https://blog.torproject.org/blog/our-first-real-donations-ca...
Why does Tor need a director? If it is truly a decentralized network, why should the project require centralized project administrators? Because of funding and donation? Let's put the whole spread the initiative PR stuff away (of course that cost money), plus the hosting cost, what else do they use the donation for?
It's not decentralized. The directory authorities, which hold the current state of the network, are hard-coded into the client software and trusted by all. They are a central point of failure - if a denial of service attack brought them all down for a suitably long period of time, the Tor network would cease to function.
Re: Detailing the CMU Tor Hidden Services Attack and Tor's Response
#15So who is going to get the billing record for all those hosts they spun up? Hard proof should not be that hard to come by, so I'm just waiting to see that. I am more likely to believe Tor than CMU because of the way the research was pulled, and it would be nice to pin them to it.
Re: Detailing the CMU Tor Hidden Services Attack and Tor's Response
#16TLDR: CIA funded people angry at FBI funded people for breaking their toys. CIA funded people react only after being deanonymized __personally__.
Re: Detailing the CMU Tor Hidden Services Attack and Tor's Response
#17Re: Detailing the CMU Tor Hidden Services Attack and Tor's Response
#18Support Tor's first donation campaign. Become a crowdfunder. https://blog.torproject.org/blog/our-first-real-donations-ca...
I can't believe they're using PayPal of all things...
What are the alternatives that work well internationally? Only Bitcoin comes to my mind, but it's a mess to buy, conversation rates fluctuate wildly and is far from easy to use.
Re: Detailing the CMU Tor Hidden Services Attack and Tor's Response
#19TLDR: CIA funded people angry at FBI funded people for breaking their toys. CIA funded people react only after being deanonymized __personally__.
Do you have a source on Tor being funded by the CIA?
It's disingenuous to say that Tor reacted only after being deanonymized personally:
1. It was well known that Nick Mathewson worked for Tor long before this attack.
2. Tor added code that allowed them to detect the attack before they knew their IPs were deanonymized: that's the only way they found out their IPs were deanonymized.