4 ms·
you know, when the tor project had some scruples and ethical standards, they actually explicitly addressed this as part of their threat model, acknowledging tha
by munin 13y ago
you know, when the tor project had some scruples and ethical standards, they actually explicitly addressed this as part of their threat model, acknowledging that if someone could see enough traffic, they could de-anonymize the network.
then, shit like this happened: https://www.eff.org/pages/tor-and-https https://www.eff.org/pages/tor-and-https
- sillysaurus2 13y agoWhat on earth are you talking about? I was reading the Tor wiki just a couple days ago, and they have a huge section regarding global passive adversaries (the topic you're receding to). They're very explicit that Tor doesn't protect against that.
- reirob 13y agoThank you for the link. I find it very explanatory for me and a nice resource to explain to others what TOR and HTTPS can protect from. I understand that using HTTPS through Tor can provide to NSA your rough location (entry node) and the site you are browsing to. But your user name and password will be safe (assuming that NSA cannot hack HTTPS). Using HTTPS only can provide the same information to NSA as the HTTPS+TOR, so for httpS sites Tor does not provide extra security against NSA? If my understanding is correct then Tor would provide only value when using Tor services, aka onion sites, but not when using public Internet services?! I would appreciate if somebody could provide their expertise on this.
- deleted 13y ago[deleted]