Live data from Hacker News

Italian Anti-Corruption Authority Adopts Onion Services

blog.torproject.org

11–20 of 101 posts

Re: Italian Anti-Corruption Authority Adopts Onion Services

#11
post #6

Too bad onions was compromised by the NSA. that makes speaking up against the Bad Guys a bit more dangerous. Admittedly there is a high chance that the Italian high brass has NO finger on the American high brass, however as long as there is no certainty it's a safety risk.

Even if you believe the NSA have some practical attacks against Tor, are you not still better off using Tor than not using it?

Heh... https://daserste.ndr.de/panorama/xkeyscorerules100.txt

Context: https://daserste.ndr.de/panorama/aktuell/nsa230_page-2.html

Re: Italian Anti-Corruption Authority Adopts Onion Services

#12
post #6

Too bad onions was compromised by the NSA. that makes speaking up against the Bad Guys a bit more dangerous. Admittedly there is a high chance that the Italian high brass has NO finger on the American high brass, however as long as there is no certainty it's a safety risk.

Even if you believe the NSA have some practical attacks against Tor, are you not still better off using Tor than not using it?

What happened to my brain? I just bought the idea that the surveillance state is overall more effective in suppressing criminality.

Re: Italian Anti-Corruption Authority Adopts Onion Services

#13

Too bad onions was compromised by the NSA. that makes speaking up against the Bad Guys a bit more dangerous. Admittedly there is a high chance that the Italian high brass has NO finger on the American high brass, however as long as there is no certainty it's a safety risk.

Tor was /targeted/ by the NSA, but I haven't read anything that makes me believe it (or onion routing in general) has been compromised. I get the feeling tor has proven so effective that the only reasonable attack against it is sowing mistrust.

Re: Italian Anti-Corruption Authority Adopts Onion Services

#15
post #6

Earlier quoted context omitted.

Even if you believe the NSA have some practical attacks against Tor, are you not still better off using Tor than not using it?

Well, anything special you do that covers your tracks may make you look suspicious. If Tor becomes more ubiquitous, maybe it won't draw suspicion anymore.

Right. Reporting corruption over Tor makes you look suspicious, but they probably don't know what you're doing. Reporting corruption without using Tor means they know exactly what you're doing and will catch you.

Re: Italian Anti-Corruption Authority Adopts Onion Services

#16
post #8

Too bad onions was compromised by the NSA. that makes speaking up against the Bad Guys a bit more dangerous. Admittedly there is a high chance that the Italian high brass has NO finger on the American high brass, however as long as there is no certainty it's a safety risk.

>Too bad onions was compromised by the NSA. that makes speaking up against the Bad Guys a bit more dangerous. Any references you would want to provide for this claim?

If you access an http site, a government controlled exit node could inject js and eventually gather enough info through profiling mouse movements and browsing habits to ID you.

Even with https, if the feds are in cahoots with the certificate authorities, you would be just as vulnerable to this sort of injection right?

However, tor hidden services is another story. I think this is where a bad actor would hit a wall.

Re: Italian Anti-Corruption Authority Adopts Onion Services

#17
They're running a Tor website... that requires JavaScript. smh

>Error! :(

>Your browser is not running Javascript that is required to use the whistleblowing client.

>It's common believe that Javascript and security don't sound well together, for this reason we suggest to use the Tor Browser, an extremely tuned FireFox browser with Tor integrated. Here you can found and download the latest release of: Tor Browser.

Re: Italian Anti-Corruption Authority Adopts Onion Services

#18
post #14

It's been unfortunate to watch regulatory bodies accross the globe try to suppress p2p over the last few months by highlighting only its illicit uses. Kudos to Italy for betting on the horse that will inevitably win.

why do you think tor is going to 'inevitably win'? Win at what exactly?

Re: Italian Anti-Corruption Authority Adopts Onion Services

#19
post #3

Onion link to the service: http://bsxsptv76s6cjht7.onion/ (source linked in the article, but in Italian: http://www.anticorruzione.it/portal/public/classic/Servizi/S... )

Looks like they aren't taking advantage of the latest version of the onion services. A shame.

https://blog.torproject.org/tors-fall-harvest-next-generatio...

Re: Italian Anti-Corruption Authority Adopts Onion Services

#20
post #8

Earlier quoted context omitted.

>Too bad onions was compromised by the NSA. that makes speaking up against the Bad Guys a bit more dangerous. Any references you would want to provide for this claim?

If you access an http site, a government controlled exit node could inject js and eventually gather enough info through profiling mouse movements and browsing habits to ID you. Even with https, if the feds are in cahoots with the certificate authorities, you would be just as vulnerable to this sort of injection right? However, tor hidden services is another story. I think this is where a bad actor would hit a wall.

You're probably at more risk of a criminal-controlled exit node stealing your login details than you are of a government-controlled exit node working out your physical location.
Post reply on HN