32 ms·

Tor: The second generation onion router – annotated version

84 points by joaobatalha 11y ago

bcook 11y ago
Messed up text formatting on Chrome for Android (CyanogenMod 13). http://i.imgur.com/2Mcv5a5.png http://i.imgur.com/2Mcv5a5.png
- aluhut 11y ago
  Same on FF44. Nice intended but in the end very annoying reader.
- harry8 11y ago
  and also for firefox on linux (centos7)
maerF0x0 11y ago
PDF link: https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf https://svn.torproject.org/svn/projects/design-paper/tor-des...
kodablah 11y ago
I am looking forward to Hornet[0]. The authors haven't put a PoC out yet. It is described decently in a recent mailing list post[1] (and impl[2]) on a BitCoin decentralizing project. A quality project might take the speed of the Hornet protocol, the tor hidden services approach, remove the exit node concept, make everyone a relay, and incentivize bandwidth sharing. 0 - http://arxiv.org/pdf/1507.05724v1.pdf http://arxiv.org/pdf/1507.05724v1.pdf 1 - http://lists.linuxfoundation.org/pipermail/lightning-dev/2015-December/000384.html http://lists.linuxfoundation.org/pipermail/lightning-dev/201... 2 - https://github.com/LightningNetwork/lightning-onion https://github.com/LightningNetwork/lightning-onion
- jpgauthier 11y ago
  Sadly, I don't think we will witness a working implementation of Hornet anytime soon. Hornet was designed to be implemented at the core Internet infrastructure in order to operate at the network level. It is practically -impossible- to achieve this level of migration (remember IPv6). Moreover, it requires the deployment of a PKI on an unprecedented scale, which may or may not be secure. However, it's true that some ideas might be extracted and used in other future projects.
satyajeet23 11y ago
The Onion routing protocol is not as anonymous as you think it is. Whoever controls the exit nodes is the one who controls the traffic.
- ponyous 11y ago
  But this is only the case when you connect to non .onion site, right?
- prettyvyle 11y ago
  I see you're running Gnome.
- nickik 11y ago
  Wrong. The exit-node might control the traffic but that does not know where you came from. You need to watch the connection into the torrnetwork as well. When you connect to https its pretty hard and risky for the exit node. If the user uses https with pinning its even harder and more risky. The Tor Network is not perfect, nothing is in this space. So you need to make a more detailed analysis then yours to evaluate it.

84 points by joaobatalha 11y ago

bcook 11y ago

Messed up text formatting on Chrome for Android (CyanogenMod 13). http://i.imgur.com/2Mcv5a5.png http://i.imgur.com/2Mcv5a5.png

aluhut 11y ago
Same on FF44. Nice intended but in the end very annoying reader.
harry8 11y ago
and also for firefox on linux (centos7)

maerF0x0 11y ago

PDF link: https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf https://svn.torproject.org/svn/projects/design-paper/tor-des...

kodablah 11y ago

I am looking forward to Hornet[0]. The authors haven't put a PoC out yet. It is described decently in a recent mailing list post[1] (and impl[2]) on a BitCoin decentralizing project. A quality project might take the speed of the Hornet protocol, the tor hidden services approach, remove the exit node concept, make everyone a relay, and incentivize bandwidth sharing. 0 - http://arxiv.org/pdf/1507.05724v1.pdf http://arxiv.org/pdf/1507.05724v1.pdf 1 - http://lists.linuxfoundation.org/pipermail/lightning-dev/2015-December/000384.html http://lists.linuxfoundation.org/pipermail/lightning-dev/201... 2 - https://github.com/LightningNetwork/lightning-onion https://github.com/LightningNetwork/lightning-onion

jpgauthier 11y ago
Sadly, I don't think we will witness a working implementation of Hornet anytime soon. Hornet was designed to be implemented at the core Internet infrastructure in order to operate at the network level. It is practically -impossible- to achieve this level of migration (remember IPv6). Moreover, it requires the deployment of a PKI on an unprecedented scale, which may or may not be secure. However, it's true that some ideas might be extracted and used in other future projects.

satyajeet23 11y ago

The Onion routing protocol is not as anonymous as you think it is. Whoever controls the exit nodes is the one who controls the traffic.

ponyous 11y ago
But this is only the case when you connect to non .onion site, right?
prettyvyle 11y ago
I see you're running Gnome.
nickik 11y ago
Wrong. The exit-node might control the traffic but that does not know where you came from. You need to watch the connection into the torrnetwork as well. When you connect to https its pretty hard and risky for the exit node. If the user uses https with pinning its even harder and more risky. The Tor Network is not perfect, nothing is in this space. So you need to make a more detailed analysis then yours to evaluate it.