Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
Karna ( KarnaSubarna@lemmy.ml )  to Privacy@lemmy.ml · 2 years ago

Tor says it’s "still safe" amid reports of police deanonymizing users

www.bleepingcomputer.com

external-link
message-square
29
link
fedilink
119
external-link

Tor says it’s "still safe" amid reports of police deanonymizing users

www.bleepingcomputer.com

Karna ( KarnaSubarna@lemmy.ml )  to Privacy@lemmy.ml · 2 years ago
message-square
29
link
fedilink
Just a moment...
www.bleepingcomputer.com
external-link
  • ShortN0te ( ShortN0te@lemmy.ml ) 
    link
    fedilink
    arrow-up
    49
    ·
    2 years ago

    This attack has been known for years now. And tor is simply not able to defend against it without a complete redesign.

    • orcrist ( orcrist@lemm.ee ) 
      link
      fedilink
      arrow-up
      27
      ·
      2 years ago

      deleted by creator

      • ShortN0te ( ShortN0te@lemmy.ml ) 
        link
        fedilink
        arrow-up
        3
        ·
        2 years ago

        Yes, sorry i worded it incorrectly you can try to make it harder but timing attacks are still possible.

        Nope, just a summary that this is just old news. There is nothing new in the article.

    • EherNicht ( EherNicht@feddit.org ) 
      link
      fedilink
      English
      arrow-up
      10
      ·
      2 years ago

      Redesign being I2P

      • Possibly linux ( possiblylinux127@lemmy.zip ) 
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 years ago

        I2p has issues that can more easily lead to deanonymization attacks. It says it on the FAQ

      • ShortN0te ( ShortN0te@lemmy.ml ) 
        link
        fedilink
        arrow-up
        2
        ·
        2 years ago

        Nope, I2P is still vulnerable to timing attacks. https://en.m.wikipedia.org/wiki/Garlic_routing

        • ReversalHatchery ( ReversalHatchery@beehaw.org ) 
          link
          fedilink
          English
          arrow-up
          3
          ·
          2 years ago

          isn’t it less vulnerable, though?

          it has higher latency, even variable latency if you set up variable hops, and everyone routes the traffic of a lot of other users, so a lot of data they can gather from timing info is noise by default

          • ShortN0te ( ShortN0te@lemmy.ml ) 
            link
            fedilink
            arrow-up
            2
            ·
            2 years ago

            Yes it has better defenses against timing attacks. Just alone the fact that multiple packets are bundled together makes it harder to identify the route a single package used.

            Also, it seems that I2P is more vulnerable against deanonymization when leaving the hidden network, i think the official I2P faq has some info about that, but have not read up upon it myself.

            • ReversalHatchery ( ReversalHatchery@beehaw.org ) 
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 years ago

              Also, it seems that I2P is more vulnerable against deanonymization when leaving the hidden network, i think the official I2P faq has some info about that, but have not read up upon it myself.

              on a quick look I did not find such a mention, but in any case in addition to that, I2P users often don’t have such a fortified browser as Tor users do, so that’s also something to count with.

              and maybe it’s not a good idea either to just reconfigure a Tor browser profile for I2P

        • EherNicht ( EherNicht@feddit.org ) 
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 years ago

          I would also like to see prove for your claim.

          • ShortN0te ( ShortN0te@lemmy.ml ) 
            link
            fedilink
            arrow-up
            3
            ·
            2 years ago

            Garlic routing[1] is a variant of onion routing that encrypts multiple messages together to make it more difficult[2] for attackers to perform traffic analysis and to increase the speed of data transfer.[3]

            First sentence. Check up the linked article as source.

Privacy@lemmy.ml

privacy@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@lemmy.ml

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

  • Lemmy.ml libre_culture
  • Lemmy.ml privatelife
  • Lemmy.ml DeGoogle
  • Lemmy.ca privacy

much thanks to @gary_host_laptop for the logo design :)

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 1 user / week
  • 1.44K users / month
  • 6.41K users / 6 months
  • 852 local subscribers
  • 51.4K subscribers
  • 4.57K Posts
  • 59.4K Comments
  • Modlog
  • mods:
  • k_o_t ( k_o_t@lemmy.ml ) 
  • tmpod ( tmpod@lemmy.pt ) 
  • Yayannick ( Yayannick@lemmy.ml ) 
  • ranok ( ranok@sopuli.xyz ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code