4 ms·
Do you just want them to store more? Because using tor to renew your car registrations seems like an obvious way to connect some dots. If that's all, then I sal
by hobs 13y ago
Do you just want them to store more? Because using tor to renew your car registrations seems like an obvious way to connect some dots.
If that's all, then I salute you!
- bigiain 13y agoYeah - both store more, and have an archive of obviously non-intelligence relevant encrypted/TOR traffic. I like to think that one day someone will have burn gigawatts of cpu/gpu power subverting the TOR network and breaking TLS/SSL, only to discover I'd been looking up what day the recycling bins are next collected in my local area. More to the point - I want the expectation of privacy and the deployment of tools to maintain privacy in the face of technological and legal "advances" in surveillance to seem closer to "technologically informed libertarian" rather than "paranoid wingnut" or "jetliner-hijacking 3rd-world-sympathiser".
- dfc 13y agoYou do realize that: "A global passive adversary is the most commonly assumed threat when analyzing theoretical anonymity designs. But like all practical low-latency systems, Tor does not protect against such a strong adversary. Instead, we assume an adversary who can observe some fraction of network traffic; who can generate, modify, delete, or delay traffic; who can operate onion routers of his own; and who can compromise some fraction of the onion routers."[1] If your attacker is not "a global passive adversary"(GPA) what dots are they going to connect if you renew your car registration? If your attacker is a GPA they are already connecting all the dots. [1] https://svn.torproject.org/svn/projects/design-paper/tor-design.html https://svn.torproject.org/svn/projects/design-paper/tor-des...
- LoganCale 13y agoI think the point was that it defeats the common purpose of using anonymity software if you are submitting identifying information (your car registration information) through it. It doesn't necessarily have long term consequences—you can generate a new identity—but it nullifies that session's anonymity. However, that doesn't mean there isn't a good reason to use it anyway to make a statement and promote legitimate usage of Tor.
- dfc 13y agoSo location anonymity is not a common purpose of anonymity software?
- bigiain 13y agoThe "renew my car registration" example was intended to imply that'd I've chosen to "give them some connected dots" - dots which are operationally useless (or worse - preferably adding noise to make the job harder and evidence that the job is sometimes wasted effort). I'm assuming "they" have access to government servers and networks, and that they'll easily be able to connect me - as a real and (at least mostly) law abiding citizen - to a clean-slate browser using SSL over TOR - logging in to a government web server with real world credentials and doing some mundane and law abiding everyday task.
- dfc 13y agoI don't get what you mean. You think that once you connect to https://site.gov/ https://site.gov/ they can easily match the traffic entering the tor network with the traffic that exited tor and initiated the web connection?
- bigiain 13y agoThat's assuming they've got compromised tor nodes that they're able to watch both my entrance and exit node. Which may well be true. (But I'm still hoping my new 2048bit GPG key and a significant portion of tor nodes are _not_ NSA bugged...)
- dfc 13y agoMore confused now. You are worried about a GPA or a lesser adversary?