Slashdot Mirror
Attacking and Defending the Tor Network
Trailrunner7 writes "In a talk at the USENIX LEET workshop Tuesday, Nick Mathewson of the Tor Project discussed the group's recent challenges in responding to suppression efforts by governments in Egypt, China and elsewhere. What the Tor members have learned in these recent incidents is that while governments are becoming more up front about their willingness to shut off Internet access altogether or censor content, users are also becoming more resourceful. Mathewson said that the group is working on methods for alleviating the problems that national-level restrictions cause for Tor users. One method involves moving to a modular transport method in order to get around some of the throttling that ISPs perform on encrypted traffic in order to make Tor usage more difficult. In a separate talk at LEET, Stevens LeBlond of INRIA in France presented research on methods for tracing Tor users back to their IP address. One of the attacks, which LeBlond and his co-authors titled 'Bad Apple,' used an exit node that the researchers controlled in order to trace the streams of data sent by users of BitTorrent over Tor back to their IP addresses."
Information is like water and it will always find a way to get through.
... and it was too slow to do anything at all.
meh...
I guess that the research demonstrated by Stevens LeBlond just goes to prove what most of us have known for a long time - even using TOR (and the same will go for any other type of encryption, IP masking etc) you are not 100% safe if somebody wants to work out who you are. The governments may not care too much if you are just sharing a few pirated movies around, although some companies may, but I can guarantee that those carrying out the real illegal activity, such as sharing child-pr0n, will be tracked down one way or another.
All that TOR does is provides people who aren't really that switched-on with a false sense of security about their activities.
So where is this peer-to-peer (as in user nodes, not IPS peers) internet people talk about from time to time?
If people have mobile devices, is there a way they can create ad hoc networks that use nothing but the tools at hand? That is, not even the cell towers, but just the mesh of devices?
Ugh. Goatse. You asshole.
hello.jpg EXIT! DO NOT CLICK.
Hopefully this does more help than a mod down.
Ohoho, nice try, but you won't goatse me today! ;)
"When information is power, privacy is freedom" - Jah-Wren Ryel
I just wish I had my webcam recording the look on my face...
Ugh. Goatse. You asshole.
UID >2000000 and blog.com. Coincidentally the same problem with anonymous networks, except it's more extreme there. No, goatse is not the worst you can see.
Live today, because you never know what tomorrow brings
As far as I understand it, if you want to host a Tor exit node it should be public knowledge that the address serves as a Tor exit node. This means you should advise your ISP that it is, and list the reasons.
how is babby formed?
I hope you die in a fire before you are old enough to contaminate the gene pool. Besides, shouldn't you be in school right now, or out playing in traffic?
I'd like to see better integration with Tor and Chrome's Incognito Mode. Normal plain-jane internet route for all my apps, but route all incognito traffic through Tor. Otherwise, I find it a pain in the rear (not to mention more error prone) to keep toggling OSX between "performance mode" and "tinfoil hat mode." Doesn't really matter what I'm viewing in tinfoil hat mode, I just would rather have the same kind of barriers on my local cookie/history storage as I have out in the world.
[
Oh geez. I replied without clicking the link. It's a goatse. Don't go.
how is babby formed?
Steganography. Make it impossible to determine what traffic is encrypted by embedding the encrypted traffic as noise in, say, a video extolling the virtues of the dictator.
I've abandoned my search for truth; now I'm just looking for some useful delusions.
everywhere
supported by western governments
you would be correct to assert that western officials have their heads up their asses and won't immediately grasp that tor is a friend, not an enemy, and an excellent way to bring down beijing, tehran, havana, and harare cheaply. but they'll warm up to the possibilities
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
Steganography. Make it impossible to determine what traffic is encrypted by embedding the encrypted traffic as noise in, say, a video extolling the virtues of the dictator.
and when the secret police begin asking the right questions about the source of the video, what then?
Steganography is all about blending into the background.
Not drawing attention to yourself.
Recently discussed on Bruce Schneier's blog ("Identifying Tor Users Through Insecure Applications"):
http://www.schneier.com/blog/archives/2011/03/identifying_tor.html
IP over Avian Carrier could bypass the problem entirely! http://www.faqs.org/rfcs/rfc2549.html
Is Stevens LeBlond a Touhou fan? Why'd he call it "Bad Apple"?
I used to think that it's the lack of exit nodes that makes TOR somewhat slow until I tried some internal services, i.e. *.onion. So I proceeded to configure an unthrottled intermediate node on a box with a 100/100 Mb/s connection. After 1-2 weeks of warming up, the node routed over 1 TB of traffic _daily_. As my monthly cap is 5 TB, I had to throttle it, unfortunately.
TL;DR: If you have spare bandwidth and want to help the TOR network without the potential risks of an exit node, please setup an intermediate node.
According to Michael Reed, one of TOR's creators, TOR was actually made for US Gov open source intelligence gathering, with the 'public' user base providing cover noise.
Via cryptome:
"The original *QUESTION* posed that led to the
invention of Onion Routing was, "Can we build a system that allows for
bi-directional communications over the Internet where the source and
destination cannot be determined by a mid-point?" The *PURPOSE* was for
DoD / Intelligence usage (open source intelligence gathering, covering
of forward deployed assets, whatever). Not helping dissidents in
repressive countries. Not assisting criminals in covering their
electronic tracks. Not helping bit-torrent users avoid MPAA/RIAA
prosecution. Not giving a 10 year old a way to bypass an anti-porn
filter. Of course, we knew those would be other unavoidable uses for
the technology, but that was immaterial to the problem at hand we were
trying to solve (and if those uses were going to give us more cover
traffic to better hide what we wanted to use the network for, all the
better...I once told a flag officer that much to his chagrin)"
Here's just some.
That link didn't work until I appended this line to my hosts file:
85.214.111.134 events.ccc.de
Is this just a United States problem?
The only reason Tor still works is because it is useful for intelligence agencies to collect data. If China ran more exit nodes than the Western agencies, they could use them for censorship/impersonation/falsification. Or they could just use them for the same thing, to spy on their citizens. Who knows how many nodes are already under Chinese government control? They certainly have the means.
I would be interested in the possible reasons one could come up with that would have your ISP say "oh, OK, that's fine - exit node away" At least in the US, an ISP will be far more concerned with maintaining good relations with the Gov't than with an individual end user...
"As the intrepid kobold companion continues his journey, he begins to wonder... if priests raises dead, why anybody die?
And why not just host the node at a hosting service and not on your personal machine. I recall reading that it's best to set it up that way but I'm not sure where I read it - perhaps the TOR site. The TOR site has a list of "tor friendly" ISP's.
You're using a hosting service and thus are still to be held responsible if used improperly, the hosting service will hold you accountable which they can easily do because you're paying the bills. This is why what I said still applies even if you use a hosting service. It must be public knowledge that your host is a Tor exit node.
how is babby formed?
Right. But I'm assuming that if you hosted at an ISP that you might avoid a visit to your personal residence by the authorities. I'm probably wrong though and some over zealous jackasses will still come and kick your door down.
My guess is the authorities would have no problem finding a reason to knock on your door if shady things are done using your hosted exit node.
how is babby formed?