4 ms·
Do you mean that Tor adds risk over 'normal' web use, or that Tor is not as secure as people think? The only added risk I see is that an exit node arguably cou
by hackuser 12y ago
Do you mean that Tor adds risk over 'normal' web use, or that Tor is not as secure as people think?
The only added risk I see is that an exit node arguably could be more likely to attack the user than an ISP, but I think the difference is that attack in different ways. Most ISP's attack confidentiality as part of their business, though probably they don't insert browser exploits.
- stephen_g 12y agoIt's a trade-off. If your ISP chooses to, they can monitor non-HTTPS traffic while knowing exactly who you are. Whereas a Tor exit is more likely to snoop, theoretically they should have no idea who you are (as long as you don't send any identifying information in plaintext). I think the most important thing is that we should try and make the implications of both clear to as many people as possible.
- Maakuth 12y agoIf you are a bad actor, you can run a Tor exit node and do whatever you like with other people's traffic passing by. This is similar to what you could do if you hosted a public wifi hotspot. While ISPs are in power to do such evils to their customers, it wouldn't be a sustainable business model to for example fish for credentials in their customer traffic. For an exit node administrator, this is entirely possible. Tor project monitors for bad exit nodes, but traffic eavesdropping for example is something they can't detect.