No post body was provided.
Tor in 2022
11–20 of 85 posts
Re: Tor in 2022
#12Not really related to the article, but what's the origin of picutres like the one used in the article? A few years ago https://www.humaaans.com/ was all the rage, is this something like this too? I can't imagine that each of these images is individually produced, I feel like they are assembled, but I can't find the origin. Edit: answering my own question, https://blush.design/ (link found on the humaans page) has thi…
Eh, it's more common than that. I worked for a roboinvestor tech company that paid an artist to draw a bunch of this crap. The deal was that it was supposed to appeal to Gen-Zers, with diverse racial cartoon characters doing their best not to look like they were at work. It seemed super cringey to me at the time
Re: Tor in 2022
#13isn't tor under the control of US intel agencies now? is there an alternative darknet?
Mesh networks that don't operate as an overlay network could in theory be pretty effective to avoid large-scale traffic correlation attacks. If we assume that the US has effective control over the whole backbone network, and enough control inside the network of most commercial available ISP's, then there isn't much mixing networks can do. An adversary can always observe, inject, throttle, speed up, block and otherwise disturb the network flow in order to determine who is talking to whom.
Re: Tor in 2022
#14Not really related to the article, but what's the origin of picutres like the one used in the article? A few years ago https://www.humaaans.com/ was all the rage, is this something like this too? I can't imagine that each of these images is individually produced, I feel like they are assembled, but I can't find the origin. Edit: answering my own question, https://blush.design/ (link found on the humaans page) has thi…
It's called Alegria and all hip tech companies use it. It's pretty widely hated https://www.reddit.com/r/starterpacks/comments/jwsagt/big_te... https://www.reddit.com/r/starterpacks/comments/groh5e/big_te... https://youtu.be/lFb7BOI_QFc
I've only ever seen it referred to as Corporate Memphis[0].
Re: Tor in 2022
#15Tor in 20202: We've succesfully killed off 90% of all actually used (as opposed to botnet) tor onion services and we're happy about it. We're protecting our end users from themselves by forcing the removal of Tor v2 protocol from the codebase. We don't care because onion services were never really something we cared about, just an add-on to trick people into thinking Tor was a real network worth building a community in. It isn't. Tor is only for people who want a pseudoanonymous clear web proxy. Forget .onion domains.
https://www.darkowl.com/blog-content/tor-v2-depreciation-shi...
Re: Tor in 2022
#16Earlier quoted context omitted.
It's called Alegria and all hip tech companies use it. It's pretty widely hated https://www.reddit.com/r/starterpacks/comments/jwsagt/big_te... https://www.reddit.com/r/starterpacks/comments/groh5e/big_te... https://youtu.be/lFb7BOI_QFc
I've only ever seen it referred to as Corporate Memphis[0]. [0] https://en.m.wikipedia.org/wiki/Corporate_Memphis
Alegria is mentioned in the third paragraph in the article you linked.
Re: Tor in 2022
#17> Tracked as KAX17, the threat actor ran at its peak more than 900 malicious servers part of the Tor network, which typically tends to hover around a daily total of up to 9,000-10,000. https://therecord.media/a-mysterious-threat-actor-is-running...
One thing i didn't catch is how they are sure that this is "one" great actor. Surely some of these servers were registered with the same fake mail address, but it seems that otherwise they are spread around the world and pretty anonymous. Did i miss something?
It's hinted at in the article that these servers are not stock servers, and the author is able to detect similar divergent behavior in all of these nodes, implying they are all the same non-standard tor software that is doing... something.
Re: Tor in 2022
#18isn't tor under the control of US intel agencies now? is there an alternative darknet?
Tor never claimed resiliency against large-scale traffic correlation attacks. Anyone who can look at a sufficient portion of all internet traffic has a good chance of deanonymizing TOR users. The Snowden revelations could lead one to believe that the US is sniffing enough traffic to make this viable, but it's anyone's guess if they collect and synchronize enough data to make deanonymization of TOR users viable. I2P a…
I wish more people ran TOR nodes. I intend to run one when I can.
Re: Tor in 2022
#19isn't tor under the control of US intel agencies now? is there an alternative darknet?
Tor was originally written by US intel agencies specifically to provide cover for spies. The release of the software to the public was specifically to provide plausible deniability for those spies. So there's always going to be some level of control and knowledge the US has about the network.
If your threat model is anything weaker than a hostile nation state then Tor is still probably good enough to use as a darknet. If you're doing anything illegal over Tor then you probably should be more worried about OPSEC failures or rubber-hose cryptanalysis.
Re: Tor in 2022
#20Tor in 20202: We've succesfully killed off 90% of all actually used (as opposed to botnet) tor onion services and we're happy about it. We're protecting our end users from themselves by forcing the removal of Tor v2 protocol from the codebase. We don't care because onion services were never really something we cared about, just an add-on to trick people into thinking Tor was a real network worth building a community…
> https://metrics.torproject.org/hidserv-dir-onions-seen.html
Your link shows that there were about 170k v2 onion addresses in September 2020, while there were about 550k v3 onion addresses at that same date. The trends were only pointing up for v3 addresses while pointing down for v2 ones.