6 ms·

What would you use instead?

Analemma_ 6y ago
I don't really do anything worth hiding from state-level attackers, but if I did I wouldn't do it over the internet at all.
- gruez 6y ago
  so you'll do it in meatspace where there are witnesses and facial recognition/ALPR cameras everywhere?
  - vinay_ys 6y ago
    There's one kind of tech that's good enough to protect your privacy from corporations that want to profile your behavior or keep you safe from malicious hackers who want to steal your data by luring you into digital spider nets. Then there's another kind of tech (and tactics and practices) that could hope to keep you safe when you are targeted by state-level actors in both digital space and meat space. Tor barely belongs in the former category.
munk-a 6y ago
Purchase some hardware with cash and distribute it around the world to tunnel through. Then expose them as public proxy servers (or even Tor nodes) so that a fair amount normie traffic passes through them. If you seriously feel paranoid about being watched then you'll want to own the hardware you're actually passing through. And I assume that any large organizations that demand this level of invisibility (cartels etc...) have essentially done this - likely locating some of those servers behind armed guards that will protect the physical device. That said, I think it's unlikely that Tor has been majority compromised at this point, but as it fades from the minds of folks and becomes more and more niche the probability will escalate.
- itake 6y ago
  >Purchase some hardware with cash and distribute it around the world to tunnel through. how do you keep the hardware physically secure? What prevents a gov actor replacing it with their own mitm proxy?
- cyberpunk 6y ago
  I would have paid some homeless guys to get me bunch of SIM cards, use em once, and proxy via some hacked webcams, after cleaning the rest of the malware off em… I mean. That’s what I uhh, would do if I was doing something dodgy on the internet… Edit; with a second hand android bought from a pawn shop running nethunter as an ap ofc…
  - v8dev123 6y ago
    > what I uhh Send me your address and I uhhh
- rsuelzer 6y ago
  Given the immense barriers to setting up an exit node, I would find it rather surprising if the majority of exit nodes are not already controlled by state actors, either directly or by proxy. My personal opinion is that if anonymity on Tor is to continue, it will be the result of competition for control of the network between opposing states and not altruistic non-profits.
encryptluks2 6y ago
Use an open Wifi hotspot with a spoofed MAC.
- itake 6y ago
  This didn't protect Ross Ulbricht.
  - encryptluks2 6y ago
    Because he walked away from his computer and left it unlocked. Wear a hidden bluetooth device or something to lock your computer and use USBGuard if you're that worried.
    - flatiron 6y ago
      IIRC he was still sitting at the computer. They just distracted him to turn around and then they swiped it.
      - encryptluks2 6y ago
        Regardless, USBGuard and a hidden bluetooth device to automatically lock when it leaves a certain radius would have likely prevented any issues.
        michaelt 6y ago
        Ulbricht was arrested in 2013. USBGuard and usbkill were released in 2015. Tough to do encryptluks2-approved opsec if you have to use tools that don't exist.
        encryptluks2 6y ago
        USBGuard is a newer tool, however the functionality has existed through udev or other integrations for some time.
      - 6y ago
2OEH8eoCRo0 6y ago
Use a VPN and don't do anything that would get you on a terrorist/cybercrime/pedo list in the first place? There is no safe when it comes to determined state actors.
- large 6y ago
  >Use a VPN Pretty sure that gets you on a list?
  - 2OEH8eoCRo0 6y ago
    You're pretty sure? It should be easy to find a source for that claim then.
- yakubin 6y ago
  > don't do anything that would get you on a terrorist/cybercrime/pedo list in the first place? This is going to be difficult: <https://arstechnica.com/information-technology/2014/07/the-nsa-thinks-linux-journal-is-an-extremist-forum/ https://arstechnica.com/information-technology/2014/07/the-n...>
  - 2OEH8eoCRo0 6y ago
    That says nothing.

I don't really do anything worth hiding from state-level attackers, but if I did I wouldn't do it over the internet at all.

gruez 6y ago
so you'll do it in meatspace where there are witnesses and facial recognition/ALPR cameras everywhere?
- vinay_ys 6y ago
  There's one kind of tech that's good enough to protect your privacy from corporations that want to profile your behavior or keep you safe from malicious hackers who want to steal your data by luring you into digital spider nets. Then there's another kind of tech (and tactics and practices) that could hope to keep you safe when you are targeted by state-level actors in both digital space and meat space. Tor barely belongs in the former category.

munk-a 6y ago

Purchase some hardware with cash and distribute it around the world to tunnel through. Then expose them as public proxy servers (or even Tor nodes) so that a fair amount normie traffic passes through them. If you seriously feel paranoid about being watched then you'll want to own the hardware you're actually passing through. And I assume that any large organizations that demand this level of invisibility (cartels etc...) have essentially done this - likely locating some of those servers behind armed guards that will protect the physical device. That said, I think it's unlikely that Tor has been majority compromised at this point, but as it fades from the minds of folks and becomes more and more niche the probability will escalate.

itake 6y ago
>Purchase some hardware with cash and distribute it around the world to tunnel through. how do you keep the hardware physically secure? What prevents a gov actor replacing it with their own mitm proxy?
cyberpunk 6y ago
I would have paid some homeless guys to get me bunch of SIM cards, use em once, and proxy via some hacked webcams, after cleaning the rest of the malware off em… I mean. That’s what I uhh, would do if I was doing something dodgy on the internet… Edit; with a second hand android bought from a pawn shop running nethunter as an ap ofc…
- v8dev123 6y ago
  > what I uhh Send me your address and I uhhh
rsuelzer 6y ago
Given the immense barriers to setting up an exit node, I would find it rather surprising if the majority of exit nodes are not already controlled by state actors, either directly or by proxy. My personal opinion is that if anonymity on Tor is to continue, it will be the result of competition for control of the network between opposing states and not altruistic non-profits.

encryptluks2 6y ago

Use an open Wifi hotspot with a spoofed MAC.

itake 6y ago
This didn't protect Ross Ulbricht.
- encryptluks2 6y ago
  Because he walked away from his computer and left it unlocked. Wear a hidden bluetooth device or something to lock your computer and use USBGuard if you're that worried.
  - flatiron 6y ago
    IIRC he was still sitting at the computer. They just distracted him to turn around and then they swiped it.
    - encryptluks2 6y ago
      Regardless, USBGuard and a hidden bluetooth device to automatically lock when it leaves a certain radius would have likely prevented any issues.
      - michaelt 6y ago
        Ulbricht was arrested in 2013. USBGuard and usbkill were released in 2015. Tough to do encryptluks2-approved opsec if you have to use tools that don't exist.
        encryptluks2 6y ago
        USBGuard is a newer tool, however the functionality has existed through udev or other integrations for some time.
    - 6y ago

2OEH8eoCRo0 6y ago

Use a VPN and don't do anything that would get you on a terrorist/cybercrime/pedo list in the first place? There is no safe when it comes to determined state actors.

large 6y ago
>Use a VPN Pretty sure that gets you on a list?
- 2OEH8eoCRo0 6y ago
  You're pretty sure? It should be easy to find a source for that claim then.
yakubin 6y ago
> don't do anything that would get you on a terrorist/cybercrime/pedo list in the first place? This is going to be difficult: <https://arstechnica.com/information-technology/2014/07/the-nsa-thinks-linux-journal-is-an-extremist-forum/ https://arstechnica.com/information-technology/2014/07/the-n...>
- 2OEH8eoCRo0 6y ago
  That says nothing.