Slashdot Mirror
New 'Hardened' Tor Browser Protects Users From FBI Hacking (vice.com)
An anonymous reader quotes an article from Motherboard: According to a new paper, security researchers are now working closely with the Tor Project to create a "hardened" version of the Tor Browser, implementing new anti-hacking techniques which could dramatically improve the anonymity of users and further frustrate the efforts of law enforcement...
"Our solution significantly improves security over standard address space layout randomization (ASLR) techniques currently used by Firefox and other mainstream browsers," the researchers write in their paper, whose findings will be presented in July at the Privacy Enhancing Technologies Symposium in Darmstadt, Germany.
The researchers say Tor is currently field-testing their solution for an upcoming "hardened" release, making it harder for agencies like the FBI to crack the browser's security, according to Motherboard. "[W]hile that defensive advantage may not last for too long, it shows that some in the academic research community are still intent on patching the holes that their peers are helping government hackers exploit."
"Our solution significantly improves security over standard address space layout randomization (ASLR) techniques currently used by Firefox and other mainstream browsers," the researchers write in their paper, whose findings will be presented in July at the Privacy Enhancing Technologies Symposium in Darmstadt, Germany.
The researchers say Tor is currently field-testing their solution for an upcoming "hardened" release, making it harder for agencies like the FBI to crack the browser's security, according to Motherboard. "[W]hile that defensive advantage may not last for too long, it shows that some in the academic research community are still intent on patching the holes that their peers are helping government hackers exploit."
So, to recap, the government-paid researchers are fighting the efforts of government-paid hackers to make the tool, that the government paid to create as a secure one, less so.
Whichever side wins, we, the taxpayers lose...
In Soviet Washington the swamp drains you.
Generalizing, if you haven't done anything wrong then you have no need to fear constant surveillance.
Protected a child rapist for over forty years so the public obviously sides with the racists.
for both sides. enjoy
So, to recap, the government-paid researchers are fighting the efforts of government-paid hackers to make the tool, that the government paid to create as a secure one, less so.
Whichever side wins, we, the taxpayers lose...
You have multiple countries with teams of very smart people working to crack everything crackable that protects privacy--because what allows private communication necessarily allows evasion of monitoring.
Of course, there are a lot of kinds of monitoring. Most obvious categories include:
1. Good purposes (attacking and/or defending against terrorists/child pornographers/organized crime/repressive regimes; tracking and blocking malware and other electronic attacks; etc...).
2. Middle-ground purposes (arguably ends-justify-the-means-behavior like violating some civil liberties while hunting white-collar criminals, child support nonpayment grey market income, doing propaganda against people in group #1).
3. Bad purposes (hunting political opposition, tracking and classifying people based on their political opinions or other things that should be prevented by freedom of speech, finding dirt for blackmail, gathering evidence of and prosecuting someone for common civil ordinance violations and petty crimes in a way which chills and stifles free speech and gives the monitoring agency unfettered power, etc...)
Real lawyers write in C++
An anonymous reader quotes an article from Motherboard:
According to a new paper, security researchers are now working closely with the Tor Project to create a "hardened" version of the Tor Browser, implementing new anti-hacking techniques which could dramatically improve the anonymity of users and further frustrate the efforts of law enforcement...
"Our solution significantly improves security over standard address space layout randomization (ASLR) techniques currently used by Firefox and other mainstream browsers," the researchers write in their paper, whose findings will be presented in July at the Privacy Enhancing Technologies Symposium in Darmstadt, Germany.
The researchers say Tor is currently field-testing their solution for an upcoming "hardened" release, making it harder for agencies like the FBI to crack the browser's security, according to Motherboard. "[W]hile that defensive advantage may not last for too long, it shows that some in the academic research community are still intent on patching the holes that their peers are helping government hackers exploit."
Every Tor after 1.4.1 is compromised. This story is social engineering from a CIA PRESSURED EditorDavid.
Tor is an encrypted network. Period. It is not designed to "frustrate law enforcement" you son of a bitching fucking pricks. Don't bullshit the public with pseudo-technical jargon either. "improves ASLR techniques". It is way more complex than that. You use Firefox as an example? They have blocked time zone spoofing as of 45.0. That is not a feature either. The FBI are lying fucking spies do not trust a word they say ever. The FBI have had Tor exploits for a long fucking time if you use anything default. The FBI set up honeypots and literally distribute child porn as well as sell drugs and kill innocent people and each other. You just don't hear about it enough.
eg. http://thenextweb.com/insider/2016/01/28/how-the-fbi-became-the-worlds-largest-distributor-of-child-sex-abuse-imagery/
You can encrypt if you know what you are doing. They are attempting to make it illegal to say anything anywhere at any time that they can't find out. They are fucking faggots.
Anything you need to encrypt for anything important get Tails 1.4.1 at the following URL's. It has been taken down from most mainstream repositories on purpose.
kat.cr/tails-1-4-1-i386-iso-multilang-tntvillage-t10922671.html
lsuzvpko6w6hzpnn.onion/tails-1-4-1-i386-iso-multilang-tntvillage-t10922671.html
If you run it in a virtual machine and use the newer guest additions you will also be potentially exposed. That is all I will say here. Learn to encrypt. They don't want to know what you are saying for your safety. Tails 1.4.1 is what Ed Snowden used.
pornographers have a larger audience?
"Won't someone think of the children?"
if there is a second cpu in your pc that can spy on your pc, read anything, has its own ip stack...
Which law? There are a bout 150 different versions and the FBI will hack anybody (which is criminal in almost all countries for them to do). So, you are right, if the FBI stopped breaking the law, this problem would go away.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
The new version will protect against hacking, not from FBI hacking. The research with the hack the FBI used was published, so other people could use the same method. So basically this update protects people from a known vulnerability. This kind of reporting does more harm than inform, as it gives the impression that the main purpose of TOR is to commit crimes.
Why must you record my phone calls?
Are you planning a bootleg LP?
Said you've been threatened by gangsters
Now it's you that's threatening me
Can't fight corruption with con tricks
They use the law to commit crime
And I dread, dread to think what the future will bring
When we're living in gangster time
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
https://github.com/immunant/se...
Why can't they just stop passing unreasonable laws? Then they wouldn't have to surveil everyone.
Isn't aslr provided by the kernel, so everything gets aslr regardless, unless you add -fno-protect-stack?
What about those of us who are communicating with oppressed people?
It little behooves the best of us to comment on the rest of us.
This, and what probable cause?
It little behooves the best of us to comment on the rest of us.
And what the "wrong" thing you did was to denounce some human right violations of your current government or a corruption case?
Well, in those specific cases, you deserve the death penalty. duh.
Sleep your way to a whiter smile...date a dentist!
why not? and why not make it proprietary, too?
Why are you quoting a book of fairy tales to justify your actions and/or train of thought ?
And I am using thought here in the most liberal way imagineable...
The first person to use that saying was Adolf Hitler. Just for the record...
Probably because the World's Leadership are all devout believers in such things.
Which explains why the World is in such piss poor condition.
I sometimes wonder where we would be as a species if not for the religious speed bumps we've had to deal with theoughout history.
Bad news.
In this day and age, " The Government " IS the threat.
We the people aren't sending drones over to kill folks.
We're not spearheading the "War on Drugs".
We're not doing regime changes, implementing no fly lists, spying on anyone and everything and doing our damdest to undo The Constitution.
We don't lock people up in a prison with no means to even challenge their accusers. Nor do we outsource torture to get around local laws.
We're not trying to force our will on any other people or governments.
The Government, on the other hand, is guilty of every single statement above and a whole lot more I don't need to type. Not to mention the crap we don't even know about
So, yeah, if there is anything to be wary of, it's the Government
The revolution will not be televised. -PCP
Generalizing, if you haven't done anything wrong then you have no need to fear constant surveillance.
Just being accused of doing something wrong can be enough to fuck up your life forever. You could be stuck in jail until your court date, and then go bankrupt because of the attorney's fees.
A hardened Android based on the raw android that protects you from being backdoored and tried to identify and alert you to the fake cellphone towers when you connect to one.
Then let's get a nice hardened Linux as well that actively fights attacks and tried to hide.
THEN we have a place for this browser to live.
Do not look at laser with remaining good eye.
These only apply to Jews since Christians and Muslims have later works which override the old covenant to which you refer.
Your comment is extraordinarily naive. For starters, read "Nineteen Eighty-Four" by George Orwell.
Exactly. I hope more people come to this realisation and start to lose sleep at night when they don't actively try to evade tax. People that willingly fund the criminal organisation called the US Government are doing far more damage in the world than those that might use TOR to buy child porn or heroine.
Seriously. Fuck the government-cheering Americans. They deserve no more than the fates of the millions they have killed around the world in recent decades.
How does a non-expert know whether this really is secure or has a NSA / FBI / Chinese etc back door. The government can easily afford to pay people to post on public forums like this claiming that any particular software is or is not secure.
Open source doesn't really help since very few people are expert enough (or have time) to review the code, and its impossible to tell if other "experts" are paid to spread misinformation.
Shut the fuck up, asshole. We'll see how much you like 'surveilling' me when I'm punching you in the face repeatedly, until it looks like bloody hamburger, or shoving your gods-be-damned cameras so far up your ass you can taste metal. People have a basic human RIGHT to not be treated like animals in a zoo, or convicts in a prison, monitored constantly. Get the fuck out of my ass, you fucking piece-of-shit NSA/FBI/CIA assholes. I'd much rather put up with the odd terrorist dickhead or mental deficient with a gun than have the gods-be-damned government all up in my business 24/7/365. Fuck that, fuck YOU, eat shit, and die.
No, you should always fear constant surveillance because at some point everyone does something wrong. Even if they don't mean too.
Some point you might be in a chat room and some crazy fuck shoots up a night club full of innocent people with a AR-15. You casually remark 'god damn '. Well now your guilty of a hate crime. Then you say we should line all those fuckers up against the wall and shoot them. Now you're guilty of plotting terrorism or some such BS.
Point is if you are being constantly watched all the time, you will eventually do something wrong.
I read at +2. If your post doesn't reach that level I will not see or respond to it.
The new law for Christians, overriding the old covenant, has only one article: "Love one another".
It's pretty Unixy: "Make just one thing and make it well".
Wow, we almost made it 12 hours after submission before somebody Godwinned the thread. That's got to be a record.
Bueller...
Bueller...
That's what I thought.
It's more subtle and pervasive than that. We have a twit of a girl who thinks it's OK to report people shoplifting who merelyv rub her the wrong way.. she think's they're "sketchy". The only thing stopping those names and faces from being added to a list is we can rewind and see the person didn't do anything. Management won't fire her because people like her and she does her job well, plus she's pretty. But she has somehow learned that it' s OK to leverage security against people who "creep you out".
I can imagine other places aren't as circumspect. Any or all of our names and faces could be now or in the future added to a wide variety of "suspect" lists which companies trade between themselves. Being a nominee to such a list can serverly impact your ability to get a retail or really any other job.
So it's worse than you think.
The commies tried to be superprogressive and super-just. All they created was a system that in the end could not even make enough food for the soviets and the Chinese.
Also, their SPARTAN behaviour resulted in Millions killed. They were Hitler's teacher. They exterminated the Romanov family, because it was expedient.
In other words, shove your "progress" up your ass.
Made by one USG branch (ATT) to be exploited by another USG branch (NSA).
(Windows is equally bad)
Putin hit the nail: "internet was made by CIA for CIA". He just gets the TLA names wrong.
Why can't they just stop passing unreasonable laws? Then they wouldn't have to surveil everyone.
Because terrorists will kill our children!
It's not the years, honey, it's the mileage. - Colonel Henry Walton Jones, Jr., Ph.D.
What about those of us who are communicating with oppressed people?
Don't. You are only aiding and abetting terrorism!
It's not the years, honey, it's the mileage. - Colonel Henry Walton Jones, Jr., Ph.D.
I said, "oppressed," not depressed.
It little behooves the best of us to comment on the rest of us.
Comment removed based on user account deletion
Of course, I was kidding. Maybe Freenet then?
It's not the years, honey, it's the mileage. - Colonel Henry Walton Jones, Jr., Ph.D.