4 ms·

Possible missing something, but most of your response is what a user should do, not how nodes themselves secure themselves. Personally, I neither use Tor, nor w

Possible missing something, but most of your response is what a user should do, not how nodes themselves secure themselves. Personally, I neither use Tor, nor would suggest anyone use it; that’s not really topic of this thread though.

TechBro8615 4y ago
Well, I certainly do have a propensity for replying to HN comments with tangentially related rants. Is there any other way to use HN? :) In this case though, I guess I was challenging the idea that many Tor instances are _not_ hacked. And more-so, I wanted to clarify that the risk of using Tor is decoupled from whether any individual Tor nodes have been hacked. If a malicious actor can figure out how to slowly and quietly deploy a sufficiently high number of their own malicious nodes to the network, then they can compromise the anonymity guarantees of the network even while maintaining a fleet of perfectly secure machines.
- O__________O 4y ago
  Common knowledge that it’s vulnerability, and hacking is not required to gain significant control over network: https://s3.documentcloud.org/documents/2719591/Farrell-Weds.pdf https://s3.documentcloud.org/documents/2719591/Farrell-Weds.... Again, topic is if what if anything Tor does to secure the nodes themselves.
  - TechBro8615 4y ago
    By “Tor” do you mean the developers of the official and most popular Tor client, daemon and browser bundle? I assume they fix bugs. I’m sure there are plenty of vulnerabilities left to find in the netcode of that software. And in fact, if I understand correctly, they’re in the middle of a huge rewrite to Rust, so there will soon be a bunch of _new_ vulnerabilities to find too (but yay for memory safety). And thanks for the link btw. Pretty sure we agree with each other here. IMO the fact that Tor is able to somewhat peacefully exist without constant government harassment tells you all you need to know. It’s an extremely powerful tool - for surveillance.
  - Trouble_007 4y ago
    #In Submissions : ( https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html ) >If you submit a video or pdf, please warn us by appending [video] or [pdf] to the title. Given the vulnerabilities in pdf files, I think it would be prudent to applying a warning to the link, as HN truncates the displayed url i.e.>Common knowledge that it’s vulnerability, and hacking is not required to gain significant control over network, [pdf]: https://s3.documentcloud.org/documents/2719591/Farrell-Weds.pdf https://s3.documentcloud.org/documents/2719591/Farrell-Weds....
    - O__________O 4y ago
      Thanks, though those guidelines are for submissions, not comment links.
      - Trouble_007 4y ago
        >guidelines are for submissions, not comment links. As I Stated, in my humble opinion; >I think it would be prudent to applying a warning to the link, as HN truncates the displayed URL Safety First.
        O__________O 4y ago
        Please stop. No one is responsible for your safety but yourself. Also, you clearly linked and cited unrelated guidelines.
        Trouble_007 4y ago
        >Please stop. No one is responsible for your safety but yourself. Also, you clearly linked and cited unrelated guidelines. Why are you requesting for me to stop posting? You came to to this thread from an article, which I posted, with security questions. Yes, We all are responsible for our own security and safety, but do we not also have a moral duty, and in some countries a legal responsibility to protect others? (i.e. hacking laws) I clearly cited that the HN guideline was from Submissions and provided the link. I also clearly expressed the opinion that given the displayed URL was truncated, that maybe, it would be prudent to post a warning [PDF].

TechBro8615 4y ago

Well, I certainly do have a propensity for replying to HN comments with tangentially related rants. Is there any other way to use HN? :) In this case though, I guess I was challenging the idea that many Tor instances are _not_ hacked. And more-so, I wanted to clarify that the risk of using Tor is decoupled from whether any individual Tor nodes have been hacked. If a malicious actor can figure out how to slowly and quietly deploy a sufficiently high number of their own malicious nodes to the network, then they can compromise the anonymity guarantees of the network even while maintaining a fleet of perfectly secure machines.

O__________O 4y ago
Common knowledge that it’s vulnerability, and hacking is not required to gain significant control over network: https://s3.documentcloud.org/documents/2719591/Farrell-Weds.pdf https://s3.documentcloud.org/documents/2719591/Farrell-Weds.... Again, topic is if what if anything Tor does to secure the nodes themselves.
- TechBro8615 4y ago
  By “Tor” do you mean the developers of the official and most popular Tor client, daemon and browser bundle? I assume they fix bugs. I’m sure there are plenty of vulnerabilities left to find in the netcode of that software. And in fact, if I understand correctly, they’re in the middle of a huge rewrite to Rust, so there will soon be a bunch of _new_ vulnerabilities to find too (but yay for memory safety). And thanks for the link btw. Pretty sure we agree with each other here. IMO the fact that Tor is able to somewhat peacefully exist without constant government harassment tells you all you need to know. It’s an extremely powerful tool - for surveillance.
- Trouble_007 4y ago
  #In Submissions : ( https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html ) >If you submit a video or pdf, please warn us by appending [video] or [pdf] to the title. Given the vulnerabilities in pdf files, I think it would be prudent to applying a warning to the link, as HN truncates the displayed url i.e.>Common knowledge that it’s vulnerability, and hacking is not required to gain significant control over network, [pdf]: https://s3.documentcloud.org/documents/2719591/Farrell-Weds.pdf https://s3.documentcloud.org/documents/2719591/Farrell-Weds....
  - O__________O 4y ago
    Thanks, though those guidelines are for submissions, not comment links.
    - Trouble_007 4y ago
      >guidelines are for submissions, not comment links. As I Stated, in my humble opinion; >I think it would be prudent to applying a warning to the link, as HN truncates the displayed URL Safety First.
      - O__________O 4y ago
        Please stop. No one is responsible for your safety but yourself. Also, you clearly linked and cited unrelated guidelines.
        Trouble_007 4y ago
        >Please stop. No one is responsible for your safety but yourself. Also, you clearly linked and cited unrelated guidelines. Why are you requesting for me to stop posting? You came to to this thread from an article, which I posted, with security questions. Yes, We all are responsible for our own security and safety, but do we not also have a moral duty, and in some countries a legal responsibility to protect others? (i.e. hacking laws) I clearly cited that the HN guideline was from Submissions and provided the link. I also clearly expressed the opinion that given the displayed URL was truncated, that maybe, it would be prudent to post a warning [PDF].