Tor Project Says It Can Quickly Catch Spying Code 34
itwbennett writes: The Tor Project, which provides more anonymous browsing across the Internet using a customized Firefox Web browser. is fortifying its software so that it can quickly detect if its network is tampered with. To address worries that Tor could either be technically subverted or subject to court orders, Tor developers are now designing the system in such a way that many people can verify if code has been changed and 'eliminate single points of failure,' wrote Mike Perry, lead developer of the Tor Browser, on Monday. 'Even if a government or a criminal obtains our cryptographic keys, our distributed network and its users would be able to detect this fact and report it to us as a security issue,' said Perry.
Re: (Score:1)
Posted by timothy on Tuesday March 22, 2016 @09:26AM from the diffing-and-flagging-aren't-
by sittingnut (88521) on Tuesday March 22, 2016 @09:24AM
Maybe you should wait until things are actually posted to try your awkward nerd-shaming attempt.
As for this, of course Tor can detect organized intrusions, it was built to allow dissidents a way to communicate with US contacts when the weight of a technologically advanced country is trying to stop the communications. The designers started from the expectation that the enemies trying to break the system would have the same types of resources that they had when setting it up, but 5 to 10 times as much of all
Re: (Score:2)
i posted after 1 hour, after seeing the story on front page below 2 others posted later with over 10 comments in them.
Re: (Score:2)
This is indeed excellent news, I'm just not sure there is much to say about it other than that.
Plus we just had a terror attack in Europe, so Tor will probably be banned here next week anyway, even though no-one used it. The security services can't let a good opportunity go to waste.
Would be nice if... (Score:3, Interesting)
Re: (Score:2)
Re: (Score:1)
#!/bin/bash
lastKnownGoodBuild=$1
someBuildInQuestion=$2
if [ "$(sha256sum $lastKnownGoodBuild | cut -c 1-64)" == "$(sha256sum $someBuildInQuestion | cut -c 1-64)" ]; then
echo -e "\n\e[1;32mSucess: The two files have equal sha256sum's !!\e[0m\n"
else
echo -e "\e[1;31mFail: The two files have DIFFERENT sha256sum's !!\e[0m"
echo -e ""
echo -e "Sha of file1 = $(sha256sum $lastKnownGoodBuild | cut -c 1-6
Re: (Score:2)
US government increases funding for Tor, giving $1.8m in 2013
http://www.theguardian.com/tec... [theguardian.com]
How is this securing government backed users and their tasks globally?
The need to communicate with network promoting color revolutions vs the role of US federal law enforcement to track back to an original ip.
Secure enough to still offer communications to shape, direct and project US foreign policy, still able to be trackable by federal US law enforcement...
For all that
Re: (Score:2)
You thought wrong. Roger Dingledine did the R&D and his story how he came to be funded by DARPA for a while is pretty interesting. At least it was when I asked him about it 15 years ago. So no, not a DARPA project, just some DARPA funding at one time and nobody ever kept that secret.
Tor Streaming? (Score:2)
I have not searched many onion sites but it seems to me that tor would be a great place for a pirate radio station or a "Big Time Television Network esq" video network.https://en.wikipedia.org/wiki/Max_Headroom_(TV_series)
But I have never seen or heard of one. Too bad since it would be a nice change of pace from all the drugs, porn, and weapons dealing on the TOR network.
"a government or a criminal" (Score:1)
Re: (Score:2)
Very true, and done with good cause.