Slashdot Mirror
New 'Hardened' Tor Browser Protects Users From FBI Hacking (vice.com)
An anonymous reader quotes an article from Motherboard: According to a new paper, security researchers are now working closely with the Tor Project to create a "hardened" version of the Tor Browser, implementing new anti-hacking techniques which could dramatically improve the anonymity of users and further frustrate the efforts of law enforcement...
"Our solution significantly improves security over standard address space layout randomization (ASLR) techniques currently used by Firefox and other mainstream browsers," the researchers write in their paper, whose findings will be presented in July at the Privacy Enhancing Technologies Symposium in Darmstadt, Germany.
The researchers say Tor is currently field-testing their solution for an upcoming "hardened" release, making it harder for agencies like the FBI to crack the browser's security, according to Motherboard. "[W]hile that defensive advantage may not last for too long, it shows that some in the academic research community are still intent on patching the holes that their peers are helping government hackers exploit."
"Our solution significantly improves security over standard address space layout randomization (ASLR) techniques currently used by Firefox and other mainstream browsers," the researchers write in their paper, whose findings will be presented in July at the Privacy Enhancing Technologies Symposium in Darmstadt, Germany.
The researchers say Tor is currently field-testing their solution for an upcoming "hardened" release, making it harder for agencies like the FBI to crack the browser's security, according to Motherboard. "[W]hile that defensive advantage may not last for too long, it shows that some in the academic research community are still intent on patching the holes that their peers are helping government hackers exploit."
Why can't you people just stop breaking the law online? Then you won't have to worry about FBI snooping.
So, to recap, the government-paid researchers are fighting the efforts of government-paid hackers to make the tool, that the government paid to create as a secure one, less so.
Whichever side wins, we, the taxpayers lose...
In Soviet Washington the swamp drains you.
It's amazing... AhhhH!! ehehehheeh now I got it heuheuheuheueuheueuheuhue
Well, I miss when was hard to fight alien things, instead of already knowing the opposite move.
pornographers have a larger audience?
Protected a child rapist for over forty years so the public obviously sides with the racists.
for both sides. enjoy
So, to recap, the government-paid researchers are fighting the efforts of government-paid hackers to make the tool, that the government paid to create as a secure one, less so.
Whichever side wins, we, the taxpayers lose...
You have multiple countries with teams of very smart people working to crack everything crackable that protects privacy--because what allows private communication necessarily allows evasion of monitoring.
Of course, there are a lot of kinds of monitoring. Most obvious categories include:
1. Good purposes (attacking and/or defending against terrorists/child pornographers/organized crime/repressive regimes; tracking and blocking malware and other electronic attacks; etc...).
2. Middle-ground purposes (arguably ends-justify-the-means-behavior like violating some civil liberties while hunting white-collar criminals, child support nonpayment grey market income, doing propaganda against people in group #1).
3. Bad purposes (hunting political opposition, tracking and classifying people based on their political opinions or other things that should be prevented by freedom of speech, finding dirt for blackmail, gathering evidence of and prosecuting someone for common civil ordinance violations and petty crimes in a way which chills and stifles free speech and gives the monitoring agency unfettered power, etc...)
Real lawyers write in C++
An anonymous reader quotes an article from Motherboard:
According to a new paper, security researchers are now working closely with the Tor Project to create a "hardened" version of the Tor Browser, implementing new anti-hacking techniques which could dramatically improve the anonymity of users and further frustrate the efforts of law enforcement...
"Our solution significantly improves security over standard address space layout randomization (ASLR) techniques currently used by Firefox and other mainstream browsers," the researchers write in their paper, whose findings will be presented in July at the Privacy Enhancing Technologies Symposium in Darmstadt, Germany.
The researchers say Tor is currently field-testing their solution for an upcoming "hardened" release, making it harder for agencies like the FBI to crack the browser's security, according to Motherboard. "[W]hile that defensive advantage may not last for too long, it shows that some in the academic research community are still intent on patching the holes that their peers are helping government hackers exploit."
Every Tor after 1.4.1 is compromised. This story is social engineering from a CIA PRESSURED EditorDavid.
Tor is an encrypted network. Period. It is not designed to "frustrate law enforcement" you son of a bitching fucking pricks. Don't bullshit the public with pseudo-technical jargon either. "improves ASLR techniques". It is way more complex than that. You use Firefox as an example? They have blocked time zone spoofing as of 45.0. That is not a feature either. The FBI are lying fucking spies do not trust a word they say ever. The FBI have had Tor exploits for a long fucking time if you use anything default. The FBI set up honeypots and literally distribute child porn as well as sell drugs and kill innocent people and each other. You just don't hear about it enough.
eg. http://thenextweb.com/insider/2016/01/28/how-the-fbi-became-the-worlds-largest-distributor-of-child-sex-abuse-imagery/
You can encrypt if you know what you are doing. They are attempting to make it illegal to say anything anywhere at any time that they can't find out. They are fucking faggots.
Anything you need to encrypt for anything important get Tails 1.4.1 at the following URL's. It has been taken down from most mainstream repositories on purpose.
kat.cr/tails-1-4-1-i386-iso-multilang-tntvillage-t10922671.html
lsuzvpko6w6hzpnn.onion/tails-1-4-1-i386-iso-multilang-tntvillage-t10922671.html
If you run it in a virtual machine and use the newer guest additions you will also be potentially exposed. That is all I will say here. Learn to encrypt. They don't want to know what you are saying for your safety. Tails 1.4.1 is what Ed Snowden used.
if there is a second cpu in your pc that can spy on your pc, read anything, has its own ip stack...
The new version will protect against hacking, not from FBI hacking. The research with the hack the FBI used was published, so other people could use the same method. So basically this update protects people from a known vulnerability. This kind of reporting does more harm than inform, as it gives the impression that the main purpose of TOR is to commit crimes.
Why must you record my phone calls?
Are you planning a bootleg LP?
Said you've been threatened by gangsters
Now it's you that's threatening me
Can't fight corruption with con tricks
They use the law to commit crime
And I dread, dread to think what the future will bring
When we're living in gangster time
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
https://github.com/immunant/se...
Isn't aslr provided by the kernel, so everything gets aslr regardless, unless you add -fno-protect-stack?
What "crime" can you commit from a information network?
A man liking young girls? That is not a crime according to God (the real one).
Remeber: opposing men taking young female children as brides is a death sentence: (Dt 13:6 hebrew) (elohim means judges/rulers/gods/etc)
Men are permitted to rape2own female children: (Dt 22:28-29 hebrew)
Enticing others to follow something else is a death sentence: (Dt 13:6 hebrew)
why not? and why not make it proprietary, too?
Why are you quoting a book of fairy tales to justify your actions and/or train of thought ?
And I am using thought here in the most liberal way imagineable...
The paranoid people out there are creating this purely on their obsession with conspiracy thoughts of government spying. Like your mundane life if worth spying on.
All it helps, is create a tool for people you really should fear which is criminals and terrorists. Your paranoid freaks should focus your enemy thoughts not on government but on real threats.
Probably because the World's Leadership are all devout believers in such things.
Which explains why the World is in such piss poor condition.
I sometimes wonder where we would be as a species if not for the religious speed bumps we've had to deal with theoughout history.
The revolution will not be televised. -PCP
A hardened Android based on the raw android that protects you from being backdoored and tried to identify and alert you to the fake cellphone towers when you connect to one.
Then let's get a nice hardened Linux as well that actively fights attacks and tried to hide.
THEN we have a place for this browser to live.
Do not look at laser with remaining good eye.
These only apply to Jews since Christians and Muslims have later works which override the old covenant to which you refer.
How does a non-expert know whether this really is secure or has a NSA / FBI / Chinese etc back door. The government can easily afford to pay people to post on public forums like this claiming that any particular software is or is not secure.
Open source doesn't really help since very few people are expert enough (or have time) to review the code, and its impossible to tell if other "experts" are paid to spread misinformation.
The new law for Christians, overriding the old covenant, has only one article: "Love one another".
It's pretty Unixy: "Make just one thing and make it well".
Bueller...
Bueller...
That's what I thought.
The commies tried to be superprogressive and super-just. All they created was a system that in the end could not even make enough food for the soviets and the Chinese.
Also, their SPARTAN behaviour resulted in Millions killed. They were Hitler's teacher. They exterminated the Romanov family, because it was expedient.
In other words, shove your "progress" up your ass.
Made by one USG branch (ATT) to be exploited by another USG branch (NSA).
(Windows is equally bad)
Putin hit the nail: "internet was made by CIA for CIA". He just gets the TLA names wrong.
Comment removed based on user account deletion