Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Arti – An implementation of Tor in Rust

blog.torproject.org

Post reply on HN
Print view View original

91–100 of 143 posts

Re: Arti – An implementation of Tor in Rust

#91

Post by iamnotarobotman »

nyanpasu64 wrote: post #60
iamnotarobotman wrote: post #49

Earlier quoted context omitted.

Is it? There's just too many to list here, even after the shutting down of Silk Road, but these crackdowns cannot be ignored; and look what they found. Majority of criminals using it once again. [0] https://www.technologyreview.com/2020/02/08/349016/a-dark-we... [1] https://www.computerworld.com/article/2845616/biggest-ever-t...

You're moving the goalposts. The people operating darknet markets are not Nazis, extremists, and generally not hitmen and terrorists. I have heard that many onion services host child sexual abuse imagery though, but I've never looked for reliable citations or personally verified.

> You're moving the goalposts.

Am I? Or didn't I just say 'There's just too many to list here' and just listed the notable examples.

> The people operating darknet markets are not Nazis, extremists, and generally not hitmen and terrorists.

So who operated those Tor nodes and services of multiple darknet websites in [0] and [1]? Another cybercriminal.

> I've never looked for reliable citations or personally verified.

Talking about 'movings goal posts' and missing the whole 'anonymity' point of Tor. Only time will tell, but so far a great use case for criminals, extremists and terrorists using it.

[0] https://www.nbcnews.com/technolog/how-anonymous-tor-users-co...

[1] https://www.technologyreview.com/2020/02/08/349016/a-dark-we...

Re: Arti – An implementation of Tor in Rust

#93

Post by fastball »

malfist wrote: post #82
shellac wrote: post #52

Earlier quoted context omitted.

The Tor project was largely funded by the US government initially. If you use Tor currently it's already that compromised, if you consider that an issue.

> If you use Tor currently it's already that compromised, if you consider that an issue --That's a very bold claim. Got any extraordinary evidence for your extraordinary claim?-- Edit: Misread! Thought you were claiming that tor was compromised. Not that tor was funded. My mistake

Notice the "that" in "that compromised".

Re: Arti – An implementation of Tor in Rust

#94

Post by beardog »

qersist3nce wrote: post #8

So at this point it is ready for passing traffic through a SOCKS proxy. Meaning we can `cargo run --release -- proxy` and redirect applications to use port `9150` for their network connections. Couple of related questions: - Does anyone know, in a Linux distro, how to pass all system traffic through a SOCKS proxy port? I'm not looking for intermediary proxy handlers but an official method to force all user and system…

You have to be careful proxying everything through Tor if you care about using Tor to its full effectiveness, widely known issues with exit nodes aside, applications may naively sent through the same circuit: https://www.whonix.org/wiki/Stream_Isolation

Re: Arti – An implementation of Tor in Rust

#95

Post by Stupulous »

colesantiago wrote: post #57
seanw444 wrote: post #53

Earlier quoted context omitted.

Bad actors use effective technologies, just like good ones do. So what?

So this means that Tor taking money from Zcash is an explicit endorsement of the crypto token space and the scams and speculation and environmental destruction they harbour. Not to mention the ransomware enablement of a so called privacy token. I don't think Tor would want to be associated with all of that on top of all the other illicit activities they are already associated with.

Taking a donor's money is at most an implicit endorsement. If an active serial killer gave me a million dollars to make the world a better place, it would be wrong for me to refuse to move money from a bad actor to those in need.

Re: Arti – An implementation of Tor in Rust

#96

Post by krageon »

kekebo wrote: post #71
nonrandomstring wrote: post #4

Well done and thank you to all involved. You are making a real difference on the side of democracy, human rights and the values of the free world at an uncertain time when so much is under threat.

Towards the flagged sibling comment about the tor network providing a hiding place for illegal activities and terrorism: While it's non-trivial to inspect many aspects of tor traffic, an often used study metric has been the (determinable) percentage of connections to hidden services, which are usually assumed to be disproportionately malicious. This ranges around ~5% across most studies, the most recent one I can fin…

> which are usually assumed to be disproportionately malicious.

Why is this assumed?

Re: Arti – An implementation of Tor in Rust

#97

Post by krageon »

pjmlp wrote: post #33
michaelcampbell wrote: post #31

Earlier quoted context omitted.

To many, yes.

Do those same people also use SELinux?

Of course not. SELinux is functionally unusable due to it's historical ties. Which is a real shame, because the network limiting (used to be, it's been a while since I looked) is very easy to use and quite good.

Re: Arti – An implementation of Tor in Rust

#98

Post by krageon »

colesantiago wrote: post #46
janandonly wrote: post #38

Earlier quoted context omitted.

I am not a big fan of alt-coins, but I'm not sure I would dare call ZCash a "Crypto token scam project". A scam in my book has one or more of the following properties: - pre-mined (a part) off all tokes (like ETH ~70%) [1] - has a team that will "rug pull" the users of their coin (think ONEcoin) [2] - Is only paying lip-service to being decentralized (think again ETH) [3] Also, who cares where the money comes from? I…

All of them are, including this 'ZCash'. As long as there are enough greater fools to pump the price of the token. Only for them to lose their money in the end. Tor is already seen in a bad light for being used for illicit activity, terrorism, illegal drugs, etc. We can have and fund tools that enhances privacy without endorsing or taking money from a so called 'cryptocurrency' that exists to distribute fake internet…

> All of them are

Perhaps instead of spreading even more ink around you could go into why you think this is the case. As it stands, the reader can only conclude you are angry - nothing else.

Re: Arti – An implementation of Tor in Rust

#99

Post by hkt »

paskozdilar wrote: post #88
onedognight wrote: post #79

Earlier quoted context omitted.

One way is to enable a global `LD_PRELOAD=libtsocks.so` (transparent socks) environment variable where you provide an optionally suid (to allow suid binaries to use it if you want) library that overrides `connect`, etc. and forwards them to your socks proxy. Make sure you get ipv4 and ipv6 support if you care. This is not bullet proof by any means. Any application that doesn't using the C library (e.g. go) will not p…

There is a shell wrapper `tsocks` that does all that - all you need is to configure the SOCKS server/port in /etc/tsocks.conf and run `tsocks $COMMAND`, and all the TCP connections of `$COMMAND` will be tunneled through the SOCKS proxy. Combined with ssh's `-D` option, it becomes a powerful ad-hoc VPN tool.

TIL about stocks - thank you!

Re: Arti – An implementation of Tor in Rust

#100

Post by nopcode »

samhw wrote: post #65
e12e wrote: post #48

Earlier quoted context omitted.

I don't think you can generally expect all processes to transparently use a SOCKS proxy? You might be able to finagle a custom vpn around it, I suppose. But AFAIK SOCKS isn't 100% transparent at the IP layer allowing all protocols to transparently layer on top? I guess SOCKS5 handles tcp and udp - so you might get away with redsocks (which explicitly recommends against using with TOR): https://github.com/darkk/redsoc…

Does anyone know how TAILS accomplishes this, then? It doesn't rely on a relay like Whonix does, but I'm not a networking expert or a Linux expert, so I'm not altogether sure how it does work.

TAILS has a very simple approach:

- Configure all applications to use Tor with the SOCKS proxy

- Block all non-Tor traffic with iptables

https://tails.boum.org/contribute/design/Tor_enforcement

Post reply on HN