• pastermil@sh.itjust.works
    link
    fedilink
    arrow-up
    4
    ·
    4 days ago

    Honest question: hasn’t the Tor network been proven to have been broken by the feds in that the anonimity of their users were no longer guaranteed?

    • theblips@lemm.ee
      link
      fedilink
      arrow-up
      1
      ·
      2 days ago

      It hasn’t, it’s just that good opsec is impossible in the long run and everyone is bound to be deanonymized eventually. For example, if you’re using a clean account on a CP sharing forum, it’s possible to track your mannerisms and post history (content, timezone, etc) to get an estimate of where you live. Then they can subpoena the ISPs for IP traffic in that region and figure out who is using Tor. That subset of IPs may then be cross referenced with the time that suspect’s account posted, that can be used as probable cause for a warrant… That sort of stuff. Sounds super complicated but most of it can be automated and bypassed these days (I don’t think you actually need to subpoena for example).
      Where did the suspect fail? He should have used multiple accounts, spaced out the interactions more randomly, used stolen WiFi, ran his comments through a translator and back, etc. At no point did Tor fail at securing his IP address end to end

    • foremanguy@lemmy.ml
      link
      fedilink
      arrow-up
      7
      arrow-down
      2
      ·
      edit-2
      1 day ago

      I think that the Tor network is proven to be broken by feds if you are suspicious.

      The Tor network was in fact used to reveal the identity of someone (https://www.techradar.com/pro/security/german-authorities-apparently-cracked-tor-anonymity-but-onion-heads-say-its-still-safe) but as we don’t know the truth we cannot really make conclusion but we can act that :

      (Tor is always more secure if you’re opsec is great from the beginning)

      For example you’re one of the biggest drug dealer and you’re doing 100 000 of deaths every say, for sure they will cramp up to you and find you, succeeding to deanonymize you.

      But most of the time you are not that attractive so you will be mostly anonymous. They can target an entity to reveal it but cannot deanonynize the entire network