funsec mailing list archives

Re: Governments hiding behind ToR?


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Wed, 12 Sep 2007 10:57:55 +0300 (EEST)

Vulnerability Report: Tor 0.1.2.x:
http://secunia.com/product/14349/?task=advisories

Vulnerability Report: Tor 0.1.1.x:
http://secunia.com/product/11789/?task=advisories

- Juha-Matti

rms () computerbytesman com wrote:
Hmm, it looks like ToR is not so secure after all as a bunch of governmental
users just found out.


Richard

Time to reveal.

http://www.derangedsecurity.com/time-to-reveal%E2%80%A6/


Did you get it? These governments told their users to use ToR, a software
that sends all your traffic through not one but three other servers that you
know absolutely nothing about. Yes, two are getting encrypted traffic but
that last exit node is not. There are hundreds of thousands ToR-users but
finding these kinds of accounts was. hmm. chocking! The person who wrote the
security policy on these accounts should reconsider changing profession,
start cleaning toilets! These administrators are responsible for giving away
their own countries secrets to foreigners. I can't call it a mistake, this
is pure stupidity and not forgivable!


http://tor.eff.org/


Tor: anonymity online

Tor is a toolset for a wide range of organizations and people that want to
improve their safety and security on the Internet. Using Tor can help you
anonymize web browsing and publishing, instant messaging, IRC, SSH, and
other applications that use the TCP protocol. Tor also provides a platform
on which software developers can build new applications with built-in
anonymity, safety, and privacy features.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: