[bestbits] Demystifying the Onion Router: GV Face Tomorrow with Tor (part of a new Advox series)

[Niels ten Oever]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear Willi,

To do this kind of timing attack you will need to have the resources
to monitor large parts of the Internet and/or have control of many Tor
relays and exit nodes.

Even in the NSA slides leaked by Snowden is was confirmed the NSA did
not have the ability to deanonymise Tor traffic.

Would be great to see the research papers where you are basing your
statements on.

As you know the traffic between the different hops on the Tor network
are encrypted, and the different hops are unknown. So I don't know how
you think that having access to an IXP would somehow break encryption
(between the hops) or the anonymity in general.

Best,

Niels

On 05/28/2015 03:17 AM, willi uebelherr wrote:
> 
> Dear Carolina
> 
> "... This makes it nearly impossible for anyone monitoring the
> Internet to understand where the traffic is coming from and where
> it is going..."
> 
> This is not true. Its a illusion. We don't have control about our 
> physical networks. But all this networks are connected in the
> IXP's (Internet Exchange Points) and give the access to the data to
> the state institutions. And this state institutions work in
> cooperation.
> 
> With a simple time based correlation you can see the traffic
> outside of the TOR network. The way from the client to the network
> and from the network to the server and reverse. Then you know, who
> communicate and with what.
> 
> Nearly 80% of all this "anonymisation" are open today.
> 
> many greetings, willi Buenos Aires, Argentina
> 
> 
> Am 27/05/2015 um 14:44 schrieb Carolina Rossini:
>> ---------- Forwarded message ---------- From: Mahsa Alimardani 
>> Date: Wed, May 27, 2015 at 1:20 PM Subject: [gvadvocacy]
>> Demystifying the Onion Router: GV Face Tomorrow with Tor (part of
>> a new Advox series)
>> 
>> Dear All,
>> 
>> As part of a new series, Advocacy is starting conversations with 
>> technical security and circumvention experts. Our goals is to
>> help the community better understand how these tools work, and
>> how we can use them. The subject on our agenda are the tools
>> associated with the *Tor Project <https://www.torproject.org/>*.
>> 
>> Join us tomorrow at 12pm ET/ 6pm CET. The hangout is happening
>> here 
>> <https://plus.google.com/events/cnqsccekj03r95a4ehialintv04>, and
>> you are all invited to join, and participate through online
>> questions.
>> 
>> Here's a bit about the conversation, and Tor:
>> 
>> *What exactly is the Tor network? Tor enables citizens to bypass 
>> government censorship and allows dissidents to communicate
>> anonymously. Sometimes however, it has been used by criminals for
>> nefarious activities, such as selling drugs or distributing child
>> pornography. The network also facilitates special sites that
>> allow website owners and their users to remain anonymous through
>> “hidden services”. This has become popularly known as the “dark
>> web”.How does it work? The Tor network is a collection of servers
>> located across the world. The network helps users connect to the 
>> Internet anonymously by sending traffic between at least three
>> Tor servers before allowing it to reach its destination. This
>> makes it nearly impossible for anyone monitoring the Internet to
>> understand where the traffic is coming from and where it is
>> going. Tor “exit nodes” are the final set of servers used in the
>> connection process. This is where a user’s traffic exits the Tor
>> network and connects to the world wide web. These nodes are set
>> up by volunteers, with a few organisations who maintain larger
>> exits, including universities and individual activists.In order
>> to better understand the tool, its uses, and its controversies,
>> Global Voices’ Iran editor Mahsa Alimardani will talk with
>> Iranian Tor developer Nima Fatemi and Tor’s head of
>> communications, activist Kate Krauss.*
>> 
>> Warmly, Mahsa
> 
> 
> ____________________________________________________________ You
> received this message as a subscriber on the list: 
> bestbits at lists.bestbits.net. To unsubscribe or change your
> settings, visit: http://lists.bestbits.net/wws/info/bestbits
> 

- -- 
Niels ten Oever
Head of Digital

Article 19
www.article19.org

PGP fingerprint    8D9F C567 BEE4 A431 56C4
                   678B 08B5 A0F2 636D 68E9
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJVacXZAAoJEAi1oPJjbWjpBDMH/iBM4M3UFmbutft0rInh21lM
wp+OOElEgMhZyd9Ai+uaxhYuUvxN8B/LS1xU3KKTo7RllQ0GFYS9mpybnDv3hf6p
gHwHqVWw87noNnPlMSSd9h7lr5sPvK3Dp0HeEJU82m2l1TZh/UH8QyuF9Ywr4og/
rmfiEDXJ2nGTeWWF++dT+bxi43l9X9C0X8ZkOB417txYpZlyLVLOMH0ChUAA655Y
/9znfGw8B3kVeKM2hq8AEU6FPCfrnlIyVfaDFoxbfpesKkEJHx5r5Mt2lbJhaKvJ
vPX+owIal/UJcPqcv/TnY4y4/8U2AVLh3cwaff43OOMBjS32Z27R9VyWVmy8+UI=
=ixIr
-----END PGP SIGNATURE-----