3 ms·
Are you talking about the current FBI case? That was an exploit in the Tor Browser Bundle (could force the browser to make a request using the non-tor network),
by jimktrains2 10y ago
Are you talking about the current FBI case? That was an exploit in the Tor Browser Bundle (could force the browser to make a request using the non-tor network), not in the Tor Network itself.
- tptacek 10y agoNo, I was referring to the FBI hidden service de-anonymization attack from last year.
- deleted 10y ago[deleted]
- belorn 10y agoYou mean the Flash based NIT exploit, as part of Metasploit? Flash which is by default off in TBB and has really nothing to do with tor, is actively discouraged by the tor project, and is in strong decline world over? Or are the talking about the Carnegie Mellon attack that modifying Tor protocol headers? If so, is that fixed security bug enough to judge tor as failure and only usable for research? Even seatbelt, which has a fairly simple concept, had initial issues and are still being improved. On the topic of the Carnegie Mellon attack, the tor project both addressed the protocol header bug and changed their security practices. Strange activity in the tor network has in the past been deemed safe until proven harmful, but as a result of having an research university doing attacks on users of the network, that practice has been reversed and strange activity is now deemed harmful until proven safe.