• linearchaos@lemmy.world
      link
      fedilink
      English
      arrow-up
      29
      ·
      4 months ago

      I’m still not entirely convinced that tor is as protected as people think it is.

      There’s only something like 6,000 exit nodes. It really wouldn’t be that much money for the government to run thousands of them. If you monitor enough exit nodes and enough relays, you can start to statistically tie connections back together with timing analysis.

      I don’t know this to be the case for sure but I can’t imagine the government hasn’t pushed towards breaking the security and identifiability of the tor network

      • Snowclone@lemmy.world
        link
        fedilink
        English
        arrow-up
        14
        ·
        4 months ago

        If you read a lot of news, it’s really clear Tor isn’t protecting anyone from the FBI. It’s about as effective as using limewire at this point. Which also, the reporting makes it pretty clear it’s not effective to hide criminal acts in the least. But it’s pretty great abusers think it’s effective so they get caught.

        • 0x0@programming.dev
          link
          fedilink
          English
          arrow-up
          9
          ·
          4 months ago

          If you read the news it’s really clear people commit opsec mistakes - all it takes is one - and get caught.

          • Snowclone@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            4 months ago

            The inciting thought of most criminal acts is ‘‘they’ll never catch me’’. Which if you’re as lucky as me, you’ll know you’ll get caught everytime, and they’ll make an example of you. It’s kept my nose clean a long time.

      • Chozo@fedia.io
        link
        fedilink
        arrow-up
        15
        arrow-down
        2
        ·
        4 months ago

        I’ve suspected Tor of being heavily compromised for a while now. It’s already known that many onion sites are government honeypots, with sites being taken over rather frequently, sometimes without triggering the canary. While it’s better than nothing in some situations, I don’t think it can be relied upon for true anonymity anymore.

      • floofloof
        link
        fedilink
        English
        arrow-up
        8
        ·
        4 months ago

        I2P has more protection against this kind of analysis.

      • yeehaw
        link
        fedilink
        English
        arrow-up
        3
        ·
        4 months ago

        It’s not as protected as people think it is. This has popped up on headlines for years. It helps, but if someone really wants to find you on there, they can. It’s just not as easy.