3 ms·
> Things like TOR can help, but that can be difficult to completely hide, and so on. I think stuff like TOR are actively harmful to a site like the CIA is tryi
by _kbh_ 3y ago
> Things like TOR can help, but that can be difficult to completely hide, and so on.
I think stuff like TOR are actively harmful to a site like the CIA is trying to run.
Accessing TOR would make you light up like a Christmas tree, it's a much harder problem to solve without TOR (as the CIA tried).
> It's interesting to consider "how would you build it better" - especially when you realize that half of the equation is trained, educated, and safely in America, the other half is potentially anyone in the world anywhere.
Randomising the structure and sanitising the element names (not having password in them) would probably go a long way. It seems like it wasn't designed with a large amount of OPSEC in mind to be honest.
- bombcar 3y agoWhich is why there are (some) attempts to disguise Tor traffic, but at some point the bits have to escape and that can be monitored. I wonder what the "bandwidth breakdown" of various traffic types is, and which ones average Tor usage would be comparable to. Could you encapsulate a Tor session in a Youtube video (with cooperation from Google)? Or would that be noticeable because Youtube is 99/1 and Tor is 80/20?
- wongarsu 3y agoJust run a Tor advocacy program in the area to increase the local userbase. But I tend to agree, for single agent TOR is probably a bad tradeoff, I suspect the intended use case of TOR is likely more about larger groups like opposition movements or rebel groups