Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Is Tor still safe to use?

blog.torproject.org

Post reply on HN
Print view View original

1–10 of 602 posts

Re: Is Tor still safe to use?

#3

Post by roetlich »

For context, here's the NDR report: https://www.ndr.de/fernsehen/sendungen/panorama/aktuell/Inve...

And more info here: https://lists.torproject.org/pipermail/tor-relays/2024-Septe...

Edit: The NDR alleges a timing attack (no further explanation) that allows "to identify so-called ‘entry servers’" Very little information is actually available on the nature of the attack. The NDR claims this method has already lead to an arrest.

Re: Is Tor still safe to use?

#5

Post by yieldcrv »

This isn't written in the most confidence inspiring way

But the things that do inspire confidence:

Tor is updated against vulnerabilities pre-emptively, years before the vulnerability is known to be leveraged

Tor Project happens to be investigating the attack vector of the specific tor client, which is years outdated

They should have just said “we fixed that vulnerability in 2022”

with a separate article about the old software

Re: Is Tor still safe to use?

#7

Post by immibis »

yieldcrv wrote: post #5

This isn't written in the most confidence inspiring way But the things that do inspire confidence: Tor is updated against vulnerabilities pre-emptively, years before the vulnerability is known to be leveraged Tor Project happens to be investigating the attack vector of the specific tor client, which is years outdated They should have just said “we fixed that vulnerability in 2022” with a separate article about the ol…

The vulnerability is mitigated by shifting the economic incentives, not fixed by making it impossible. It can't be fixed without a completely different network design, like in Mixminion or Katzenpost. Someone suggested I2P, but it's mostly fundamentally the same as Tor. It uses unidirectional tunnels, which might help.
Post reply on HN