Slashdot Mirror
Tor Eyes Crowdfunding Campaign To Upgrade Its Hidden Services
apexcp writes The web's biggest anonymity network is considering a crowdfunding campaign to overhaul its hidden services. From the article: "In the last 15 months, several of the biggest anonymous websites on the Tor network have been identified and seized by police. In most cases, no one is quite sure how it happened. The details of such a campaign have yet to be revealed. With enough funding, Tor could have developers focusing their work entirely on hidden services, a change in developer priorities that many Tor users have been hoping for in recent years."
No matter how much effort goes into securing the transport layer, it means absolutely nothing if the end nodes themselves are insecure. Something as simple as a SQL injection or remote code execution could easily deanonymize an end node. With how quickly many of those sites sprung up, one of the current theories is lack of security on the end-points themselves is what was attacked, not the Tor network itself.
Tor is centered on one single tech: onion routing.
They seem to refuse to consider adding or adopting other techs, like using chaff in the network and trivial delay/random queues to at least defeat some timing and observation attacks.
It's like they're hooked and stuck on their unilateral approach.
And when people bring up alternatives they point to anonbib and disclaim them.
Well yeah, nothing's a total solution, but what some people voice is helpful.
They're also way too quiet about their position whether personal or corporate or project about being for or against govt surveillance, the fact of where they get their funds, all these quiet LEA liasons they must be interacting with.
Come on guys, everyone has opinions, show some balls, vent a little.
Anymore I'd bet I2P and some other networks are in a better position anonymous-service wise.