3 ms·

I thought the consensus was that law enforcement can "crack" Tor these days (a la tracing the illegal traffic back to the source, not just the exit node) Is th

I thought the consensus was that law enforcement can "crack" Tor these days (a la tracing the illegal traffic back to the source, not just the exit node) Is this not the case, or is it not a black/white answer?

driverdan 7y ago
No, that's not true. Tor's anonymity depends on distributed control of its nodes. If one entity, say a government org, controls a large portion of entry and exit nodes it may be able to trace some requests. That's an attack that has been known since the beginning though, it's not new.
LinuxBender 7y ago
People will hack the sites that are proxied behind Tor .onion domains. Hacking a site is also a crime, so you won't find too many documents revealing how a crime network was exposed. Instead, they gather data from the hacked servers and hand it over as anonymous tips. Tor is just a proxy. A fancy proxy that uses onion routing, but a proxy nonetheless. Think of it as a CDN that does not have to hand over customer details because they have plausible deniability about who you are. Unlike commercial CDN's however, Tor does not try to prevent hacking. That exercise is left to the people running the servers that Tor is routing to. As it turns out, some criminals may be lazy or inept.
sp332 7y ago
https://2019.www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting https://2019.www.torproject.org/docs/faq.html.en#AttacksOnOn... It's not 100%, but the more of the connection your attacker can see, the worse your odds. If you're in the USA and you're using nodes in the Five Eyes https://en.wikipedia.org/wiki/Five_Eyes https://en.wikipedia.org/wiki/Five_Eyes and you're being tracked by the NSA, they might be able to see everything. Maybe. Also check point #4 on this answer https://2019.www.torproject.org/docs/faq.html.en#EverybodyARelay https://2019.www.torproject.org/docs/faq.html.en#EverybodyAR...

driverdan 7y ago

No, that's not true. Tor's anonymity depends on distributed control of its nodes. If one entity, say a government org, controls a large portion of entry and exit nodes it may be able to trace some requests. That's an attack that has been known since the beginning though, it's not new.

LinuxBender 7y ago

People will hack the sites that are proxied behind Tor .onion domains. Hacking a site is also a crime, so you won't find too many documents revealing how a crime network was exposed. Instead, they gather data from the hacked servers and hand it over as anonymous tips. Tor is just a proxy. A fancy proxy that uses onion routing, but a proxy nonetheless. Think of it as a CDN that does not have to hand over customer details because they have plausible deniability about who you are. Unlike commercial CDN's however, Tor does not try to prevent hacking. That exercise is left to the people running the servers that Tor is routing to. As it turns out, some criminals may be lazy or inept.

sp332 7y ago

https://2019.www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting https://2019.www.torproject.org/docs/faq.html.en#AttacksOnOn... It's not 100%, but the more of the connection your attacker can see, the worse your odds. If you're in the USA and you're using nodes in the Five Eyes https://en.wikipedia.org/wiki/Five_Eyes https://en.wikipedia.org/wiki/Five_Eyes and you're being tracked by the NSA, they might be able to see everything. Maybe. Also check point #4 on this answer https://2019.www.torproject.org/docs/faq.html.en#EverybodyARelay https://2019.www.torproject.org/docs/faq.html.en#EverybodyAR...