4 ms·
Although the method of the attack didn't directly break Tor/VPN, the nature of it has compromised confidence in those technologies. What good is using Tor or a
by mfoy_ 11y ago
Although the method of the attack didn't directly break Tor/VPN, the nature of it has compromised confidence in those technologies.
What good is using Tor or a VPN if I can't be sure any web page I load will compromise me? Suddenly every single link becomes a potential land mine... is the web server compromised? Is it safe?
You could argue that, of course, loading a malicious web page will do malicious things. But in this case, the malicious code is compromising all further web activity as well from the sounds of it.
- the8472 11y agoAIUI the issue only occurs when you're browsing through tor with a browser profile that also contains logins to chinese websites linked to your identity. This is why you shouldn't run your regular browser session through TOR for critical work and use the tor browser bundle instead, with a separate profile, with a as-paranoid-as-possible configuration (minimal cross-site requests! use µMatrix, not just noscript) if you really want to information leakage. Tor itself can only do so much, it doesn't magically prevent your browser from telling the world that you're person X.
- mo 11y agoTor Browser protects against these sorts of attacks very well. Just don't use Tor with a regular browser. https://twitter.com/torproject/status/610542145305464832 https://twitter.com/torproject/status/610542145305464832