Live data from Hacker News

Freedom Hosting sites compromised, founder arrested

twitlonger.com

91–100 of 140 posts

Re: Freedom Hosting sites compromised, founder arrested

#91
post #81

Am I the only one who is f*cking tired of FBI and other violence based organizations using pedophilia as their excuse to raid and bust people ? Think of the children! Yes .. a good front to make it so that they can just bust anything using SWAT forces. Is pedophilia such a big problem? Really ? I would like to see one study about pedophilia and the problems it creates, instead of what the problems that NSA and FBI ar…

...perhaps you could argue that there's nothing wrong with pedophilia per se , but there is definitely something wrong with child abuse, and I shouldn't need to link you to a study to convince you of that. By shutting down child pornography rings, police are preventing further abuse. How else would you propose they go about it?

By shutting down child pornography rings, police are preventing further abuse.

Maybe, maybe not. Probably in some or even many cases, but certainly not all.

But, it also provides an unquestionable excuse to not care about "accidental" overreach or collateral damage. Someone's hosting something they don't like on a shared server? Guess what happens when they "discover" kiddie porn hosted by someone else on that same server?

Re: Freedom Hosting sites compromised, founder arrested

#92
post #83

Earlier quoted context omitted.

How is it sensationalist? The headline was not that there is a vulnerability in TOR, but a vulnerability in "half of all TOR sites."

The headline implies that the "compromise" is an inherent failure in the protocol (or else how could "half" of all sites be infected?) instead of the reality that the hosting provider intentionally placed an exploit in all of their pages. A better title may be like: "major .onion hosting service infiltrated by feds, all sites converted to honeypots; founder arrested". This does not imply any fundamental flaws in Tor…

language is incredibly important. thank you a lot for the explanation.

Re: Freedom Hosting sites compromised, founder arrested

#93

Software that creates randomly TBs of fake email, voice (skype) and other communication daily to disrupt NSA. Possible? Helpful? I.e. billions of emails created daily originating from millions of email accounts created daily that contain random words including the ones the NSA is looking for. I mean, they went on the path of the least resistance with this whole PRISM thing. Kind of blatantly stupid approach of "just…

Even if I don't see why you are saying it on this specific thread, it actually came to my mind few days ago. I think it is a good, simple idea. No technical difficulties, just spamming and make the whole thing unanalyzable.

Re: Freedom Hosting sites compromised, founder arrested

#94

Am I the only one who is f*cking tired of FBI and other violence based organizations using pedophilia as their excuse to raid and bust people ? Think of the children! Yes .. a good front to make it so that they can just bust anything using SWAT forces. Is pedophilia such a big problem? Really ? I would like to see one study about pedophilia and the problems it creates, instead of what the problems that NSA and FBI ar…

I think this type of thread is what tptacek meant by "these threads [that question whether CP is a big deal] are always repellant." I must say, this one certainly is.

I encourage everyone to chill out, leave your emotions at the door, and give the topic a thorough and dispassionate treatment.

"I'm fucking tired of X" is an unreasonable way to conduct ourselves. It's a sure way not to change anyone's opinion.

Re: Freedom Hosting sites compromised, founder arrested

#95
post #78
post #72

Earlier quoted context omitted.

That argument would be very convincing if Obama weren't elected twice. Fool me once, shame on you, fool me twice...

You make it sound like there was a viable alternative, like the other party in the two-party system wasn't being held to ransom by ultra-nationalists.

That's because it is exactly the situation. Nobody is "held ransom" by anybody. But voters that think like you - low-information voters that can vote for anybody provided that he is "our guy" because "their guy" is The Devil himself - are exactly the reason why it happens again and again. And will happen until the majority abandons such mentality - which I personally wouldn't expect happening any time soon.

Re: Freedom Hosting sites compromised, founder arrested

#96
post #55

Earlier quoted context omitted.

"Exploiting an unknowable amount of users of a service as to hunt them. Using illegally harvested data from botnets, while others get hunted and prosecuted for coding them. This tiered society where the legally immune can profit off acts that get others jailed." Not that I disagree with this sentiment, but how is this different from the fact the government is "legally immune" from using/possessing weapons and firearm…

It's more like the government hiring non-government forces that can then legally possess arms that other "non-affiliated" people (i.e. civilians) can't, and being given legal immunity for killing random people, some of which might turn out to be criminals. I.e. Batman, with a bit less moral compass.

Or even "Batman with a completely normal corporate moral compass – 100% focused on its primary goal – of 'increasing shareholder value'"…

Re: Freedom Hosting sites compromised, founder arrested

#97
post #83

Earlier quoted context omitted.

How is it sensationalist? The headline was not that there is a vulnerability in TOR, but a vulnerability in "half of all TOR sites."

The headline implies that the "compromise" is an inherent failure in the protocol (or else how could "half" of all sites be infected?) instead of the reality that the hosting provider intentionally placed an exploit in all of their pages. A better title may be like: "major .onion hosting service infiltrated by feds, all sites converted to honeypots; founder arrested". This does not imply any fundamental flaws in Tor…

'infiltrated by feds' is a presumption based on speculation at this point. Assumptions dont 'correctly reflect events'. If you want to fix something, fix it entirely.

Re: Freedom Hosting sites compromised, founder arrested

#98
post #24
post #21

Earlier quoted context omitted.

I still don't understand this concept. Any iframe or JS executed is still going through Tor. They'd need to load up Chrome or start another Firefox process.

The point is the iframe/JS is used to break out of the browser sandbox, due to a bug in the browser, with techniques like heap spraying (mentioned in the article). Once you manage to get arbitrary code running in the context of the browser, you can do anything the browser can, including (presumably) making raw non-TOR connections to anywhere, identifying the TOR user and correlating that with what they were doing ove…

That's why there are things like Whonix

Re: Freedom Hosting sites compromised, founder arrested

#99
post #54

Earlier quoted context omitted.

Checking on this now. I find it dubious, but possible. I haven't used the Tor Browser Bundle for quite a while, but last I recall they definitely had a mechanism to keep JavaScript from executing. It seems ridiculous that they wouldn't, given their long history of advocacy for NoScript et al. Will edit when done installing/checking. EDIT: So it seems that NoScript is installed as part of the package, but that scripts…

[EDIT: edited typo, clarified what TAILS was] I had mentioned (split between a couple other posts) that even with JS enabled, Noscript will prevent many XSS/CSRF and clickjacking attempts, which has been explained to me as the reason for its inclusion. And That disabling Javascript actually makes you more fingerprintable because it's rare for browsers to do this. I am guessing that the payload that article mentions s…

How do we know that Linux is not targeted? The script checks for "Windows NT" in the user agent, but as mentioned above TBB on Linux does have that string in the user agent.

Re: Freedom Hosting sites compromised, founder arrested

#100
post #64

Earlier quoted context omitted.

TOR is also a great honeypot. There are no ways of validating a given node is not governmental, either.

There are no ways of validating anything is not governmental.

Yes, but there are degrees of this, and TOR gives you nothing without the resources of the government.
Post reply on HN