Live data from Hacker News

Tor Exit Nodes in Libraries – Pilot

blog.torproject.org

11–20 of 60 posts

Re: Tor Exit Nodes in Libraries – Pilot

#11
post #4

If you think the Tor project is working on an important problem, consider running a relay. It's inexpensive, easy to administer, no hassle (if not an exit) and I think the scale is such that a couple thousand additional relays would make a noticeable difference to the network. You can even have it AWS where it will get automatic updates with almost no effort: https://cloud.torproject.org/ If you want to run it on OS…

What sort of legal protections does Mexico have for people running a Tor node?

Re: Tor Exit Nodes in Libraries – Pilot

#12
post #4

If you think the Tor project is working on an important problem, consider running a relay. It's inexpensive, easy to administer, no hassle (if not an exit) and I think the scale is such that a couple thousand additional relays would make a noticeable difference to the network. You can even have it AWS where it will get automatic updates with almost no effort: https://cloud.torproject.org/ If you want to run it on OS…

> safely bypass surveillance from across the world

Is this true, for a global passive adversary? If all of the nodes which route your link go through a friendly IC that shares ToR traffic patterns, I'm pretty sure traffic analysis can disclose where you are browsing or which hidden service you are visiting (or at least where it's hosted).

Does anyone know more about how a ToR link is chosen, whether you can control it, and what some alternatives might be?

Re: Tor Exit Nodes in Libraries – Pilot

#13
post #4

If you think the Tor project is working on an important problem, consider running a relay. It's inexpensive, easy to administer, no hassle (if not an exit) and I think the scale is such that a couple thousand additional relays would make a noticeable difference to the network. You can even have it AWS where it will get automatic updates with almost no effort: https://cloud.torproject.org/ If you want to run it on OS…

> You can even have it AWS where it will get automatic updates with almost no effort: https://cloud.torproject.org/

I guess you didn't click on your own link....

> As of May 8, 2015, the Tor Cloud project has been discontinued.

Re: Tor Exit Nodes in Libraries – Pilot

#14
post #4

If you think the Tor project is working on an important problem, consider running a relay. It's inexpensive, easy to administer, no hassle (if not an exit) and I think the scale is such that a couple thousand additional relays would make a noticeable difference to the network. You can even have it AWS where it will get automatic updates with almost no effort: https://cloud.torproject.org/ If you want to run it on OS…

What sort of legal protections does USA have for people running a Tor node?

It's probably legal, but it hasn't yet been tested in courts: https://www.torproject.org/eff/tor-legal-faq.html.en

Re: Tor Exit Nodes in Libraries – Pilot

#15
https://pando.com/2014/07/16/tor-spooks/

  In 2006, Tor research was funded was through a no-bid
  federal contract awarded to Dingledine’s consulting
  company, Moria Labs. And starting in 2007, the Pentagon
  cash came directly through the Tor Project itself —
  thanks to the fact that Team Tor finally left EFF and
  registered its own independent 501(c)(3) non-profit.

  How dependent was — and is — Tor on support from
  federal government agencies like the Pentagon?

  In 2007, it appears that all of Tor’s funding came from
  the federal government via two grants. A quarter million
  came from the International Broadcasting Bureau (IBB), a
  CIA spinoff that now operates under the Broadcasting Board
  of Governors. IBB runs Voice of America and Radio Marti, a
  propaganda outfit aimed at subverting Cuba’s communist
  regime. The CIA supposedly cut IBB financing in the 1970s
  after its ties to Cold War propaganda arms like Radio Free
  Europe were exposed.

  The second chunk of cash — just under $100,000 — came
  from Internews, an NGO aimed at funding and training
  dissident and activists abroad. Tor’s subsequent tax
  filings show that grants from Internews were in fact
  conduits for “pass through” grants from the US State
  Department.

Re: Tor Exit Nodes in Libraries – Pilot

#16
post #4

If you think the Tor project is working on an important problem, consider running a relay. It's inexpensive, easy to administer, no hassle (if not an exit) and I think the scale is such that a couple thousand additional relays would make a noticeable difference to the network. You can even have it AWS where it will get automatic updates with almost no effort: https://cloud.torproject.org/ If you want to run it on OS…

> safely bypass surveillance from across the world Is this true, for a global passive adversary? If all of the nodes which route your link go through a friendly IC that shares ToR traffic patterns, I'm pretty sure traffic analysis can disclose where you are browsing or which hidden service you are visiting (or at least where it's hosted). Does anyone know more about how a ToR link is chosen, whether you can control i…

From https://svn.torproject.org/svn/projects/design-paper/tor-des...:

    A global passive adversary is the most commonly
    assumed threat when analyzing theoretical anonymity
    designs. But like all practical low-latency systems,
    Tor does not protect against such a strong adversary.

Re: Tor Exit Nodes in Libraries – Pilot

#17
post #15

https://pando.com/2014/07/16/tor-spooks/ In 2006, Tor research was funded was through a no-bid federal contract awarded to Dingledine’s consulting company, Moria Labs. And starting in 2007, the Pentagon cash came directly through the Tor Project itself — thanks to the fact that Team Tor finally left EFF and registered its own independent 501(c)(3) non-profit. How dependent was — and is — Tor on support from federal g…

https://www.torproject.org/about/sponsors.html.en

The NSA fully-funded and wrote SELinux, too. So what?

Re: Tor Exit Nodes in Libraries – Pilot

#18
post #4

If you think the Tor project is working on an important problem, consider running a relay. It's inexpensive, easy to administer, no hassle (if not an exit) and I think the scale is such that a couple thousand additional relays would make a noticeable difference to the network. You can even have it AWS where it will get automatic updates with almost no effort: https://cloud.torproject.org/ If you want to run it on OS…

What sort of legal protections does USA have for people running a Tor node?

Generally speaking, running a relay node is considered to be fairly safe and hassle-free.

Running an exit node is more of a hassle, you'll usually be receiving a lot of DMCA notices and a lot of ISPs won't permit running exit nodes from their network.

There has been at least one case outside of the US where an exit node operator was prosecuted and found guilty of aiding in distributing child porn [1].

[1]: https://www.techdirt.com/articles/20140701/18013327753/tor-n...

Re: Tor Exit Nodes in Libraries – Pilot

#20
post #17
post #15

https://pando.com/2014/07/16/tor-spooks/ In 2006, Tor research was funded was through a no-bid federal contract awarded to Dingledine’s consulting company, Moria Labs. And starting in 2007, the Pentagon cash came directly through the Tor Project itself — thanks to the fact that Team Tor finally left EFF and registered its own independent 501(c)(3) non-profit. How dependent was — and is — Tor on support from federal g…

https://www.torproject.org/about/sponsors.html.en The NSA fully-funded and wrote SELinux, too. So what?

I am naive on this topic.

Sincere question: don't these facts call the utility of SELinux and Tor into question?

If the answer is "because math", well... I don't speak math. Being illerate in this manner, I must depend on the reputations of the parties involved (and the reputations of the parties that report who was involved!).

So... Can a person who does not trust the NSA trust products they paid for?

Post reply on HN