Slashdot Mirror
NSA Agents Leak Tor Bugs To Developers
An anonymous reader writes: We've known for a while that NSA specifically targets Tor, because they want to disrupt one of the last remaining communication methods they aren't able to tap or demand access to. However, not everybody at the NSA is on board with this strategy. Tor developer Andrew Lewman says even as flaws in Tor are rooted out by the NSA and British counterpart GCHQ, other agents from the two organizations leak those flaws directly to the developers, so they can be fixed quickly. He said, "You have to think about the type of people who would be able to do this and have the expertise and time to read Tor source code from scratch for hours, for weeks, for months, and find and elucidate these super-subtle bugs or other things that they probably don't get to see in most commercial software." Lewman estimates the Tor Project receives these reports on a monthly basis. He also spoke about how a growing amount of users will affect Tor. He suggests a massive company like Google or Facebook will eventually have to take up the task of making Tor scale up to millions of users.
When the NSA is plugging holes for you...
Beware of Greeks bearing gifts....
Shouldn't that be "Beware of geeks bearing gifts...." in this case?
Live today, because you never know what tomorrow brings
He suggests a massive company like Google or Facebook will eventually have to take up the task of making Tor scale up to millions of users.
If one of those guys gets their hands on it you can forget about using it to hide anything from the government.
"Here's some bugs we've fixed for you guys. Trust us."
Oh yeah, because the current debug team we can trust so much...
They probably found tachyons or some shit, knowing them.
Who needs to give a damn about exploiting Tor when you can see the damned future?!
An organization who has a record of defending people's freedom or a corporation who has a record of selling every kind of information they can get their fingers on.
Mmm... I don't know which applies to google and which to the NSA....