2 ms·

Hacker Factor has a series of articles about various attacks on Tor: https://www.hackerfactor.com/blog/index.php?/archives/868-Deanonymizing-Tor-Circuits.html h

• kodablah 7y ago
  There is an ongoing "rust"-ification of the codebase. I agree it is easier to audit when the code is clearer, but the majority of deanon attacks seem to concern network or browser techniques.
• rendx 7y ago
  Can you point to any attack that can be attributed to errors in the Tor code, anything where a rewrite or audit would have helped? Most "attacks" seem to be based on well-known drawbacks of the design which are usually discussed prior to specification or implementation (but unavoidable).
• newnewpdro 7y ago
  Running a hosting service is sure to include far more exploitable surface area than the tor network itself. Just assume any one of their servers were vulnerable to RCE attacks, they hosted dynamic web sites on conventional web hosting stacks! These things leak deanonymizing information like a sieve.
• zelly 7y ago
  You can make a mistake in your code and end up causing someone to go to prison. What a time to be alive.
  • AlexCoventry 7y ago
    In the 80s,it was already possible to make a mistake in your code which would cause someone to die horribly. https://en.m.wikipedia.org/wiki/Therac-25 https://en.m.wikipedia.org/wiki/Therac-25