4 ms·
>>Astoria [is] both most effective and most usable when at its highest security level, the researchers say, so "Astoria is a usable substitute for the vanilla T
by otoburb 11y ago
>>Astoria [is] both most effective and most usable when at its highest security level, the researchers say, so "Astoria is a usable substitute for the vanilla Tor client only in scenarios where security is a high priority."
I'm still working through the research paper[1] linked at the end of the article, but if Astoria is as good as described, wouldn't Tor either adopt the same node selection policies, or people shift over to Astoria wholesale?
[1] http://arxiv.org/pdf/1505.05173.pdf http://arxiv.org/pdf/1505.05173.pdf
EDIT: From the paper, quotes below provide much clearer context for the quote in the article:
"From our evaluation of Astoria, it is clear that the performance-security trade-off is favorable only in its higher security configurations. [...] However, at lower security configurations, the performance offered by Tor is clearly better, and its security, only slightly worse. Therefore, Astoria is a usable substitute for the vanilla Tor client only in scenarios where security is a high priority."
- Hello71 11y agoor provide patches against upstream instead of forking.
- Forbo 11y agoIt would be interesting to see if this gets adopted in something like Tails where security is the priority focus.
- pakled_engineer 11y agoTails apparently doesn't even have time to patch grsec/pax so unlikely. It took them almost a year to add macchanger on boot even, they spend all their available time patching the flood of bugs due to cramming their distro full of userland tools like video editing software.
- higherpurpose 11y agoSounds like their efforts would be better spent on a ChromeOS-like OS that's only a Tor (or Astoria) browser at its core.
- MacsHeadroom 11y agoOr Firefox OS, considering Tor Browser is FF.