3 ms·
This is a known attack on the tor ecosystem, and why the tor project keeps a list of these bad relays so they can be routed around [1]. As the article stated, i
by Sanddancer 12y ago
This is a known attack on the tor ecosystem, and why the tor project keeps a list of these bad relays so they can be routed around [1]. As the article stated, it's why it's important to use https as much as possible, and also why things like signing and/or hashing any sort of downloaded file is useful. If it's signed and hashed, it makes it a lot harder to sneak a malicious program in this way.
[1] https://trac.torproject.org/projects/tor/wiki/doc/badRelays https://trac.torproject.org/projects/tor/wiki/doc/badRelays
- voltagex_ 12y ago"As of April 2013 this list is no longer being maintained". Although there's an alternative mentioned in the document.
- Sanddancer 12y agoYeah, they stopped publicly stating they know who's naughty and who's nice, which is probably useful in avoiding playing whack-a-mole with someone determined to cause trouble. Then again, I imagine that a knowledgeable attacker would just look through their logs of who's hitting their node to figure out when they've been caught.