Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Law Enforcement Undermines Tor

marx.wtf

Post reply on HN
Print view View original

51–60 of 86 posts

Re: Law Enforcement Undermines Tor

#51

Post by mdhb »

cedws wrote: post #8

I have suspected Tor has been busted for quite a long time. LE is only using this power selectively for now - the last thing that they want is to scare users away lest they go and build something more secure. The Nym mixnet[0] seems promising but it's still new and unproven. I had an idea a while back to make traffic analysis more difficult by building circuits distributed across adversarial countries. Would like to…

The public tends to have a very strange idea as to a lot of things on this topic while forgetting that TOR itself was actually a department of defence project or NSW I forget originally.

If you’re interested in seeing what the next generation of this stuff looks like (although AFAIK is not really known outside of defence contracting circles) take a look at this https://github.com/tst-race/race-docs/blob/main/what-is-race...

Re: Law Enforcement Undermines Tor

#53

Post by mdhb »

ementally wrote: post #37

Are there any projects that generates random traffic? Like a website where you have it open it keeps sending random traffic. It will make traffic analysis very hard.

As I mentioned elsewhere in this thread if you’re looking for proper state of the art it’s coming out of DARPA projects and you can see what I mean here https://github.com/tst-race/race-docs/blob/main/what-is-race...

Re: Law Enforcement Undermines Tor

#54

Post by ementally »

Cthulhu_ wrote: post #40
ementally wrote: post #37

Are there any projects that generates random traffic? Like a website where you have it open it keeps sending random traffic. It will make traffic analysis very hard.

It probably doesn't; think about it, most websites already have a load of random stuff, plus all users combined is also heaps of randomness. No self-respecting analyist would go through logs manually, it's all fed into search / analysis software, filtering through noise.

Depends, it is a very well-known attack vector https://www.whonix.org/wiki/Speculative_Tor_Attacks#Website_...

Re: Law Enforcement Undermines Tor

#55

Post by bronson »

ryandv wrote: post #36
jeffhuys wrote: post #34

Earlier quoted context omitted.

Yeah that's all fun, I don't have anything to hide either. But what if I actually WILL in the future, retroactively? I've said a few things here and there, what if certain types of speech end up getting banned and if you don't remove it on time (or lost access), you risk jail-time? Seems far away, but it's literally happening in England. Please watch out with this kind of thinking - it's dangerous to everyone.

> what if certain types of speech end up getting banned and if you don't remove it on time (or lost access), you risk jail-time? So racism, homophobia, and transphobia? Why would you support technologies that promote and support the dissemination of hate speech and misinformation?

For the near future, more like info on safe abortions. Or union organizing.

Re: Law Enforcement Undermines Tor

#56

Post by mdhb »

Cthulhu_ wrote: post #39
j-bos wrote: post #5

One advantage of imperfect privacy solutions like Tor is they force authorities to invest if they want to snoop. In the before times if soneone wanted to read your mail they'd need to at least convince a judge and then spend manpower interecepting the envelopes, today they can just ping google for a bcc.

Is that true? IIRC they still need to do the legal paperwork to get an email from google et al (FISA request?).

Yes mostly true, exceptions apply mostly based on jurisdictions and capabilities.

The safeguards are actually much much better than what the opinions would lead you to believe on here.

People really seem to get off on the idea that they are on the targeting list of an intel service but you actually have to put in some real work to meet that criteria. If you’re buying drugs for example even the relevant LE authorities will at most knock on your door to scare you assuming you live in an English speaking jurisdiction.

Re: Law Enforcement Undermines Tor

#57

Post by hydrolox »

Attrecomet wrote: post #27
amiga386 wrote: post #20

Earlier quoted context omitted.

Your proposal is too modest. Why should only law enforcement see our messages? All messages should be treated like the banns of marriage and read aloud by the local priest or posted on the church walls, so that all interested parties can learn their contents and raise any relevant legal objection.

In actual fact, your proposal is too modest. Why should only electronic messages be so publicized? After all, relevant communication, either for our protectors in law enforcement (and secret services, don't forget their hard work for our prosperity) or for us members of society, happens via all kinds of mediums. Privacy of correspondence might have had some relevance in the past, but today, with LLMs helping us work…

In fact, your proposal is too modest still. We are still free to think whatever we want! We should fast forward the development of neuralink chips and broadcast everyone's thoughts live to everyone at all times so that you can make a judgement of unethical behavior

Re: Law Enforcement Undermines Tor

#59

Post by dialup_sounds »

It's not directly mentioned in this article, but the four deanonymized users were admins of a CSAM site with hundreds of thousands of users. If you're concerned about being targeted by law enforcement, step one is probably: don't be that.

https://www.dw.com/de/darknet-missbrauchsplattform-boystown-...

https://www.sueddeutsche.de/panorama/kindesmissbrauch-boysto...

Re: Law Enforcement Undermines Tor

#60

Post by mdhb »

c0wb0yc0d3r wrote: post #43
Cthulhu_ wrote: post #39

Earlier quoted context omitted.

Is that true? IIRC they still need to do the legal paperwork to get an email from google et al (FISA request?).

Yes paper work is required. I think OP is pointing out that that it doesn’t require the same amount of work it used to. Especially from law enforcement.

LE are mostly avoiding this by just buying from the same public ad network sources that everyone else does and using that as a way to avoid the paperwork, I know people get very pissy about EUs GDPR sometimes but if you want to put an end to that kind of thing you need to tackle the private sector collection problem which almost anyone can access and is comparable with mid tier nation state capabilities.
Post reply on HN