leadersose.blogg.se

"Web browsing is hostile to privacy and security," she says. That may seem an extreme way to browse the web, but such protections are increasingly worth considering, says Sarah Jamie Lewis, executive director of the Open Privacy Research Society. The attention they have received is minimal compared to their social value and compared to the size and determination of their adversaries.Tor refers to "the onion router", which is a network that bounces your traffic through random nodes, wrapping it in encryption each time, making it difficult to track it's managed and accessed via the Tor browser.

In a way, it's even surprising that hidden services have survived so far. It seems that there are various issues that none of the current anonymous publishing designs have really solved. The task of hiding the location of low-latency web services is a very hard problem and we still don't know how to do it correctly. In addition, as Tor relays were potentially seized - according to the group - the Tor network may have been attacked in order to unveil the locations of these hidden services.Īnother possible attack vector could have been the "Guard Discovery Attack," which reveals the guard nodes of specific hidden services, as well as denial of service attacks on relays or clients in the Tor network, and potentially remote code execution exploits against Tor.Īs you can see, we still don't know what happened, and it's hard to give concrete suggestions blindly. The operators of hidden websites may have failed to use adequate operational security, or common web bugs like SQL injections or RFIs (remote file inclusions) may have been exploited by undercover agents.

The Tor Project said it has no idea how the hidden services were located, but "is most interested in understanding how these services were located, and if this indicates a security weakness in Tor hidden services that could be exploited by criminals or secret police repressing dissents." However, there are a number of plausible scenarios which could explain the mass takedown.

On Sunday, the Tor Project group said they were "as surprised as most of you" at the seizure, but have "very little information about how this was accomplished." FBI Director: Mobile encryption could lead us to 'very dark place'Īpple's and Google's encryption plans have not gone down well with US law enforcement, and the agency's director says the companies are leading us down a dark path.