11–20 of 87 posts
If anyone wants to do this, I recommend shopping around first ;P
"Applicants must pay 195,000 roubles to enter the competition" This seems rather bizarre... ~$5500 cannot simply be a symbolic sum to deter idiots.
IMO Russians intend to make their venture profitable.
"Applicants must pay 195,000 roubles to enter the competition" This seems rather bizarre... ~$5500 cannot simply be a symbolic sum to deter idiots.
IMO Russians intend to make their venture profitable.
As Schneier says: "The reward of $114,000 seems pretty cheap for this capability. And we now get to debate whether 1) Russia cannot currently deaonymize Tor users, or 2) Russia can, and this is a ruse to make us think they can't." https://www.schneier.com/blog/archives/2014/07/russia_paying...
That's because they're asking if someone's done it and wants some cash. If you had, monetizing the knowledge isn't exactly easy. No intelligence agency will bother paying for it.
How on Earth is $110,000 a reasonable value for this level of vulnerability? (And with a multi-thousand dollar up front cost to boot.) I'm not remotely an expert on security, much less nefarious black-market hacks, but I would think that a whole lot of nations around the world would be willing to pay millions (each!) for this capability. Heck, if not for this, I would have included Russia on that list.
What is the normal process for selling these exploits? They'd want to see the exploit first, I'm guessing in person, then they transfer over the money, then you give the code and details?
What if someone wanted to remain anonymous during the transaction? What would be the best method of doing that? You couldn't really send a friend because it might be easy to trace back to you, and it would be hard to trust a stranger.
What's to stop someone from selling one of these exploits to multiple nations and companies? What is the normal process for selling these exploits? They'd want to see the exploit first, I'm guessing in person, then they transfer over the money, then you give the code and details? What if someone wanted to remain anonymous during the transaction? What would be the best method of doing that? You couldn't really send a…
I wonder if this would backfire and make Tor even stronger, as now even more attention is given to Tor's robustness.
If the attack is particularity disastrous then there will likely be a large fork. But once a project is started and a community built its unlikely that force will be stopped.
As Schneier says: "The reward of $114,000 seems pretty cheap for this capability. And we now get to debate whether 1) Russia cannot currently deaonymize Tor users, or 2) Russia can, and this is a ruse to make us think they can't." https://www.schneier.com/blog/archives/2014/07/russia_paying...
That's because they're asking if someone's done it and wants some cash. If you had, monetizing the knowledge isn't exactly easy. No intelligence agency will bother paying for it.