FBI Admits It Controlled Tor Servers Behind Mass Malware Attack

The FBI didn't conduct a 'mass malware attack' on the open web. It did, however, inject malicious code in Tor hidden services that were hosted in Freedom Hosting.

How is that not a 'mass malware attack'?

>Which way is that?

https://www.schneier.com/contact.html

All default settings, except the 4096-bit key length.

See: https://www.schneier.com/blog/archives/2013/09/my_new_gpgpgp...

This is crazy, but really interesting at the same time. I always thought that this was the way to break anonymity on the Tor network.

FBI basically generated a shit-load of Tor nodes (https://blog.torproject.org/blog/how-to-handle-millions-new-...) for some while to increase their chances of intercepting traffic. Following the data collection and using statistic, they were able to pin-point the origin of most Freedom-hosting request/response, and then raided the place.

Think about it: if you own 9/10 of the node of the Tor network (and they did for a while) and simply analyze all the traffic, it's just a matter of time before you can find what you are looking for.

The second interesting thing is how they planned everything using the Firefox exploit to find out who was going on each Website. I'm pretty sure they got what they were looking for.

Even thought this is highly scary in term of government control, I think we can all learn a lot about it. Also, I'm wondering how much this attack cost.

Someone else should step up and give a comprehensive overview, because I can only recount the timeline from memory, not provide sources. But iirc, Anonymous was a loose coalition of random people on the internet, some of which turned out to have some basic hacking skills. They weren't really taken seriously until they embarrassed HBGary. At that point, the FBI began investigating them. Anonymous changed their name to LulzSec (or possibly AntiSec). The FBI used standard police techniques to infiltrate and eventually dismantle the those groups. The technique was simply to 1) figure out who was a member of Anonymous, 2) threaten them with prosecution unless they cooperate, 3) repeat. This eventually led them to turn Sabu, Anonymous's leader. I'm going to dig for an interesting HN comment I remember reading about the relationship between FBI, Anonymous, and the takedown of Freedom Hosting.

EDIT: Here it is: http://news.ycombinator.com/item?id=6154642

In order to be friendly to mobile users, I'll copy-paste the comment here (although the link is worth reading because of the informative replies):

---

redthrowaway 40 days ago | link | parent | flag

Interesting. Freedom Hosting had been a target of Anonymous' Operation Darknet from the beginning--they're well-known for refusing to take down exploitative sites. Operation Darknet is, itself, a pretty interesting phenomenon: Anonymous hacks onion sites, then hands over user information to the FBI for investigation. Anonymous does what the FBI legally can't, and in exchange they're not prosecuted for it. I can't find the article now, but I recall reading an interview with an FBI agent in Wired or Ars or some such where he described the anons as "Internet Superheroes". (sic)

That, in and of itself, is kind of curious. Curiouser? One of the original Op Darknet principals was Sabu. You may remember him as the hacker the FBI rolled and got to bust up LulzSec. Sabu was turned by the FBI on June 7th, 2011.[1] Operation Darknet began several months later, in October, 2011.[2]

The obvious question, then, is this: Did the FBI use Sabu to entice Anons into attacking child porn networks, thereby evading the laws against them doing it themselves? Did they use the fact they turned a well-known hacktivist to help them deal with criminals they lacked the legal tools to go after? Is this arrest the culmination of those efforts?

[1] https://en.wikipedia.org/wiki/Sabu_(hacktivist)

[2] http://www.informationweek.com/security/attacks/anonymous-at....

The FBI was never going to ignore huge stockpiles of easily accessible child pornography on the deep web, and Hacker News was never going to believe that this wasn't about more than child pornography. Just another day.