6 ms·
So few people are actually using Tor that correlation-based traffic analysis has very good odds of revealing identities: get the list of employees, pick out tho
by mopsi 5y ago
So few people are actually using Tor that correlation-based traffic analysis has very good odds of revealing identities: get the list of employees, pick out those whose connections have accessed Tor at the time of attacks, and you'll have a very short list of suspects.
- gruez 5y agowhere do you get tor usage data? The only time I heard of it being used was when someone used tor on some university's wifi network to send a bomb threat. In that case it would be fairly easy to get the data, but if it's just a random guy using his home internet connection, can you get their ISP to cooperate? do they even keep such data around?
- tiagod 5y agoMany of the tor relays are operated by intelligence agencies (this is known, and obvious otherwise). If you connect to one of those, your IP is logged somewhere forever. These same agencies, depending on your country, can probably know who that IP belonged to at the time instantly, or quickly enough. If the agency has a wiretap on the ISP's fiber, then they'll know even if you're not connected to one of their relays (you could use the unlisted bridges, but they probably know those anyway)
- mopsi 5y agoGetting the metadata is not a problem if you're the FBI (like in the article). You can get it directly from ISPs, or collect it yourself 24/7/365 in bulk and search it when needed.