Big portion of Tor compromised

[Sinbad]

https://twitter.com/x/status/1292906474776096768

 

[RonSwanson]

Any thing that promises anonymity will be attacked. It's like hanging a red flag in front of a bull.

Edit: The article suggests that it is due to neglect, lack of resources. They should consider automation.

 

[NarrowBandFtw]

Any thing that promises anonymity will be attacked

and it will be attacked by professional / government actors, not so much your run-of-the-mill basement dwelling hackers

 

[lunch]

Hectic, this is pretty scary stuff

 

[w1z4rd]

I am concerned about this, but I think In many cases we are fine. Gmail and other major services uses a strict version of ssl that I dont think ssl-strip can remove.

 

[longboy]

I am concerned about this, but I think In many cases we are fine. Gmail and other major services uses a strict version of ssl that I dont think ssl-strip can remove.

What about Bluecoat?

 

[w1z4rd]

What about Bluecoat?

I dont know. You can do weird things with the internet with the right hardware.

 

[NarrowBandFtw]

I am concerned about this, but I think In many cases we are fine. Gmail and other major services uses a strict version of ssl that I dont think ssl-strip can remove.

Google is part of the group (Facebook and Apple too) that have cooperated with the NSA to share data freely though, SSL won't save you when the provider gave the NSA a backdoor ...

 

[Sinbad]

What about Bluecoat?

Bluecoats decrypt and reencrypt, and their root certificate is trusted in your machine's CA store so you don't get certificate errors.

 

[Mystic Twilight]

Google is part of the group (Facebook and Apple too) that have cooperated with the NSA to share data freely though, SSL won't save you when the provider gave the NSA a backdoor ...

Sshhh, the current boogey man is china and their tick tock data collection. Not the nsa and their backdoors, cisco router chip replacements, etc.

 

[Moto Guzzi]

I always found it funny to observe the problems/fears related to attacks etc, but in the mean time you sit on various operating/bios systems using it no problem. Your computer surely is aware of every input to it, otherwise it won't be able to function.
Relativity I presume.

 

[Vorastra]

People have been talking about this weakness since the beginning of Tor. I never understood why people felt safe using Tor.

"Oh but it's secure and anonymous, the government, or anyone, can't read your data!"

Tor is made up of nodes. Whoever runs those nodes can intercept data. Run enough nodes and you'll be a relatively "common" exit path. Cue this issue.