undefined | Better HN

0 pointsuluyol4y ago0 comments

There has been plenty of work on how to de-anonymize Tor users over the years, e.g., see https://www.cs.princeton.edu/~jrex/papers/usenixsec15.pdf.

There's no doubt in my mind that state actors have been putting similar techniques to use.

0 comments

3 comments · 1 top-level

hda24y ago· 2 in thread

> There has been plenty of work on how to de-anonymize Tor users over the years, e.g., see https://www.cs.princeton.edu/~jrex/papers/usenixsec15.pdf.

But that's not what gp asked.

Has the work you linked to been shown to lead to the successful deanonymization of a normal user during normal Tor browsing? It's a simple yes or no question. I don't follow tor news like I used to but I'm willing to bet a months-worth of salary that the answer is still no.

uluyolOP4y ago

Unless the NSA, FBI, or whoever comes out and says oh we broke Tor, I don't see how you could ever get a definite answer to that question. And I don't really see that happening.

Or it could leaked, on accident or by a whistleblower. But that's pretty uncommon.

sporksmith4y ago

True, but it'd be difficult to both make arrests based on info learned from having broken Tor, and keep it secret that they'd broken Tor. It's possible by obscuring how they got information (e.g. via parallel construction), but difficult to do at scale.

j / k navigate · click thread line to collapse