5 ms·
Comcast Declares War on Tor?
- cjbprime 12y agoThis article seems seriously confused about how Tor works ("only the ISP used along with it can ascertain what activity takes place on Tor"), such that I don't trust the rest of what it's saying. There is probably no story here.
- sheetjs 12y agoYou clicked link, they got page views -> mission accomplished! (the sad state of affairs of tech "journalism")
- atmosx 12y agolucky me I read the HN comments first :-p (moving to the next article).
- jMyles 12y agoI often do this (and did in this case). I wonder how frequent a phenomenon this is becoming and how it affects media consumption / retention?
- sroerick 12y agoAnd how often do you think comments are manipulated as part of marketing and damage control? To be fair, this is a dumb error and I wish they would issue an honest correction rather than simply removing the incorrect part.
- fru2013 12y agoLikely a technical misunderstanding by the author. It is possible for an ISP to detect tor traffic[1], but not determine the contents of the traffic. My guess is that the author is not aware of this. http://www.netresec.com/?page=Blog&month=2013-04&post=Detecting-TOR-Communication-in-Network-Traffic http://www.netresec.com/?page=Blog&month=2013-04&post=Detect...
- dmix 12y agoConsidering the entire blog is about 'deep web' you'd hope the author is aware of this difference and made an error. But clicking on his bio it seems to be this authors first post there, so who knows.
- derefr 12y ago> but not determine the contents of the traffic. Not even this much, actually. Tor doesn't do any sort of protection on the traffic; it just routes it cleverly. The packets themselves are still plaintext if you're not using an encrypted protocol (e.g. HTTPS) on top of Tor. In practice, most people use Tor through the browser bundle, which includes an HTTPS-Only extension. But if you're routing random other protocols through Tor (e.g. XMPP, BitTorrent, etc.) be aware that Tor is not doing any protection of your plaintext; that's the responsibility of your client/protocol.
- schoen 12y agoYou're right with respect to the exit node, but here the story is about the entry node. The entry node would not be able to see the traffic contents, because they're encrypted with the exit node's key. I helped make this diagram to demonstrate these details: https://www.eff.org/pages/tor-and-https https://www.eff.org/pages/tor-and-https
- panarky 12y agoNot exactly. Tor encrypts your traffic within the Tor network. Even if you don't encrypt, Tor does automatically so your ISP cannot see your content. If you don't encrypt, your content will be visible to the exit node, but not to your ISP. https://www.torproject.org/about/overview https://www.torproject.org/about/overview
- sroerick 12y agoWell, simultaneous to that, it also describes Comcast asking the customer what it is exactly they were using Tor for. Since then, it does appear that phrase has been redacted. It would be nice if they published a correction, though.
- thefreeman 12y agoYea, it's a bummer because I would love any reason to flame comcast. But this entire article seems to be based off random complaints by people on reddit. There is nothing to go on here.
- smoyer 12y agoNot a very friendly web-site either ... My first-generation iPad does show anything.
- naner 12y agoI can't believe I'm "defending" Comcast, but this sounds made-up. Why would Comcast care about Tor and if they wanted to discourage use why would they confront customers using it?
- cjbprime 12y agoGood point -- it would be very easy for Comcast to disable entries on to the Tor network if they wanted to (as China does), since their IP addresses are public.
- privong 12y agoTo be fair, not all tor IP addresses are public; there are bridge relays which are not publicly listed[0]. This is one of the tactics for getting around blocking of tor in countries such as China. [0] https://www.torproject.org/docs/bridges.html.en https://www.torproject.org/docs/bridges.html.en
- meowface 12y agoAgreed, this doesn't sound like anything an ISP would actually do. Comcast isn't run by the brightest people though so I'd be interested to see if anyone provides evidence that these phone calls actually took place.
- pyre 12y agoMaybe it goes something like this: 1. Customer got caught X time(s) under the "Six Strikes" policy. 2. Comcast starts monitoring customer more closely. 3. Customer starts torrenting over Tor. 4. Comcast (who is monitoring this person more closely) sees that large amounts of traffic is going over Tor. 5. Comcast tries to intimidate customer to stop using Tor. 6. ??? 7. Profit? I'm kind of iffy on the motivation for anything past #4 though, but it seems sort of plausible... maybe?
- MichaelGG 12y agoIf it's not a fabrication, it's more likely the customer was running a Tor exit node and that caused some problems and Comcast told him not to run an exit node. Which is somewhat reasonable, as it's a pain to deal with abuse complaints.
- Buge 12y ago>A Comcast agent named Jeremy allegedly called Tor an “illegal service.” Did the customer mention it was started by the US Navy and continues to received a lot of funding from them?
- rhino369 12y agoTalking to a comcast "agent" is like asking a Seaman about Naval tactics.
- JoshTriplett 12y agoThat's giving far too little credit to the average Seaman.
- zoba 12y agoThe article implied, but didn't make clear, that the customers were using Tor to browse the internet (as opposed to being a Tor endpoint). I could see comcast having an issue with customers who are endpoints, but, I'm not really sure why they would care / how they would know that someone was was using Tor.
- david_shaw 12y ago> why they would care Not sure. It's not as though using Tor circumvents the need for an Internet service provider. Maybe it's political. > how they would know that someone was was using Tor. It's easy to determine whether a user is using Tor based on the (known) connections that are made. It's the same way organizations can block Tor, or that the Tor client knows how to reach the rest of the network.
- x0x0 12y agoI live on the peninsula and it boggles the mind that, in sfbay, I effectively have one choice for wired internet access because dsl is so slow where I live. As idlewords says: San Francisco is an 8-mile square that aims to disrupt the world but can’t wire itself for decent Internet. I guess it’s a hardware problem
- sroerick 12y agoCan anyone explain how this article has more upvotes in less time than the story about Beamforming, yet is two spots lower on the HN frontpage?
- shmerl 12y agoWhat other proof does anyone need that Comcast hates net neutrality? It should be a clear reason to tank any of their plans for acquisition of TWC.
- jpalioto 12y agoWho uses Tor without VPN? When I'm using Tor, all Comcast sees is an encrypted tunnel to Private Internet Access.
- Houshalter 12y agoIsn't Tor supposed to be an encrypted tunnel?
- jpalioto 12y agoYes. But, with VPN it looks something like this: Me -> TOR encrypts data -> VPN encrypts data -> data goes through tunnel -> VPN decrypts data -> TOR encrypted data passes through first node -> TOR encrypted data passes through relay node -> TOR decrypts data as it passes through the exit node -> swish nothing but net This gives protection from the ISP and from the VPN provider -- I have to trust neither.
- Houshalter 12y agoIt seems excessive; tor traffic already goes through 3 different nodes. And if the ISP is banning tor there is no reason they wouldn't/couldn't ban VPNs.
- jpalioto 12y agoToo many people use VPNs for work.
- Buge 12y agoSo here's one of their sources: https://www.reddit.com/r/DarkNetMarkets/comments/2g2e44/is_comcast_legally_allowed_to_do_this/ https://www.reddit.com/r/DarkNetMarkets/comments/2g2e44/is_c... I think it was posted by this user: https://www.reddit.com/user/theliberare/ https://www.reddit.com/user/theliberare/