6 ms·
If my adversary was a state, I'd be seriously worried that the act of downloading Tor is monitored and would put me as a potential threat.
by haolez 6y ago
If my adversary was a state, I'd be seriously worried that the act of downloading Tor is monitored and would put me as a potential threat.
- guram11 6y agowith or without downloading Tor I say its safe to assume everyone here is already under some kind of monitoring like we're all potential customers/criminals
- Scoundreller 6y agoWe’re all on many lists. What matters is where you rank on it.
- MiroF 6y agoThere's way too much noise in this measurement for it to be seriously meaningful, unless ownership of tor was itself a crime.
- jonfw 6y agoMaybe in the west that'd be true- since we can freely trade information over the public internet, TOR doesn't have much utility. Let's say you're in a more totalitarian government that censors more information- TOR might look like a practical solution there, and might have people using it for more practical purposes.
- bzb5 6y ago> since we can freely trade information over the public internet No we can’t.
- identity0 6y agoDon't be pedantic, you're doing it right now.
- stjohnswarts 6y agoHe's right, it is a pretty big if, since storage space and compute power are basically free for NSA/CIA (and they have shown they don't care about privacy laws or the 4th amendment) you can safely assume all your traffic and data is stored away somewhere for future usage against you. If you're in Europe you are probably a bit safer.
- bzb5 6y agoThere are many things you can’t post online because you’d get in trouble.
- bakuninsbart 6y agoYes, who would dare use something like a VPN in a totalitarian country like China?
- jerheinze 6y agoYou can use pluggable transports to camouflage your traffic (they're already built into the Tor Browser, e.g. meek, snowflake, ...). To get Tor in the first place in a censored/risky place you can get it from the official GetTorBrowser repository on Github: https://github.com/TheTorProject/gettorbrowser https://github.com/TheTorProject/gettorbrowser (There are additional links to GitLab, Archive.Org, Google Drive)
- jonfw 6y agoThe state could easily track who accesses that GitHub page, if they control the ISP.
- remexre 6y agoThat GitHub page in particular, versus any GitHub page? That'd involve a TLS break, no?
- jonfw 6y agoJust did some research, and you're right! TLS obscures the URL by default. I didn't know that. Only nuance being that an attacker can draw conclusions about the length of the URL- which won't be very helpful on Github.
- jerheinze 6y agoTLS alone is not sufficient. Fortunately, Github is also on the HSTS preload list.
- a1369209993 6y ago> length of the URL Also the length of the response, which is significantly more 'helpful', although probably not enough for a working attack unless you're willing to harrass a significant fraction of your intellectual workforce over false positives.
- pvarangot 6y ago
- michelb 6y agoIf your adversary was a state, they probably control most of the exit nodes you connect to.
- Raed667 6y agoDepends on which state is your adversary I guess? US or someone from 5 eyes? Yes for sure! Algeria? You're probably safer