Possible upcoming attempts to disable the Tor network

https://blog.torproject.org/blog/possible-upcoming-attempts-disable-tor-network

by dewey • 12 years ago

516 121 12 years ago

blog.torproject.org

robertfw2• 12 years ago

What ability does TOR have to operate in a decentralized manner without the directory servers? Is that something that is possible now, or is it being worked on, or is it even possible?

edit: this question was asked in the blog comments, here is arma's response

There are a bunch of research papers looking at exactly this question. Check out http://freehaven.net/anonbib/#usenix11-pirtor for one direction, and then http://freehaven.net/anonbib/#wpes09-dht-attack http://freehaven.net/anonbib/#ccs09-shadowwalker http://freehaven.net/anonbib/#ccs09-torsk http://freehaven.net/anonbib/#ccs10-lookup for another direction to consider. The current situation is that nobody knows of a better design that is actually better in practice. The one we have is well-studied and has well-understood downsides, so I'm not eager to move to one that is poorly-studied and has poorly-understood downsides.

chrisfosterelli• 12 years ago

Based on my understanding of the TOR network, it currently cannot function without directory authorities. The directory authorities provide a signed list of all of the TOR network relays, and that includes the set of encryption certificates used for each relay and all of the configuration information about it.

The TOR clients come hard coded with a list of directory authorities. Without the ability to query the directory authorities they cannot find a usable TOR route. I don't know if there is some caching involved, but if not then this would effectively stop the network for anyone trying connect to TOR.

derefr• 12 years ago

So why couldn't signed lists of relays just, say, float around on a DHT, with a cache-and-forward model like Freenet, but where newer documents (provided they're signed with the same key) will overwrite older documents in the same cache slot?

Actually, to put it another way, Freenet is itself the optimal bootstrapping mechanism for Tor. Maybe the two projects should merge, such that Tor would effectively be an optimization over the specific case of two peers generating and searching for one-another's signed Freenet documents (this effectively being an IP tunnel already).

yc1010• 12 years ago

Can the bitcoin blockchain be used to somehow store this data?

userbinator• 12 years ago

I've always thought one of the biggest weaknesses of Tor was that it did rely on a central authority. BitTorrent moved from a centralised tracker model to a decentralised DHT, so I'm quite sure it's theoretically possible. In the worst case, I think a DHT could be used as a routing layer, storing and retrieving encrypted packets in it, and achieve a similar anonymity effect... of course the latencies are going to be horrible, so it might be better to just use it as a way to setup multihop tunnels.

nickodell2• 12 years ago

Does anyone have any more information?

What jurisdictions are these Directory Authorities located in?

paralelogram• 12 years ago

193.23.244.244: Germany, Chaos Computer Club e.V.

194.109.206.212: Netherlands, XS4ALL Internet BV

154.35.32.5: United States, Cogent Communications

131.188.40.189: Germany, Friedrich Alexander Universitaet Erlangen Nuernberg

199.254.238.52: United States, Riseup Networks

171.25.193.9: Sweden, Foreningen for digitala fri- och rattigheter

128.31.0.34: United States, Massachusetts Institute of Technology

82.94.251.203: Netherlands, NAH6 BV

86.59.21.38: Austria, SILVER:SERVER GmbH

208.83.223.34: United States, Applied Operations, LLC

freeasinfree• 12 years ago

Ironically in countries unfriendly to privacy

http://en.wikipedia.org/wiki/Global_surveillance_disclosures...

mindslight2• 12 years ago

There really is no Russia/China? Why are all of the servers located within the jurisdiction of USG?!

discostrings• 12 years ago

It's very interesting that the project has some advanced notice about a threat.

My first guess would be that a nation has made some demands of the project that the project won't comply with, and that country has suggested they will seize the directory authority servers located inside it if the demands aren't met soon. [Edit: a new comment by arma on the original story, "To be sure to keep our source safe, we're not providing more details quite yet", makes this seem less likely.]

Or perhaps an insider has leaked some plans to the project.

Along another line of thought, if the US government wanted to further complicate online privacy, I imagine they'd choose a time like now, when headlines about the "cyber intrusions" of 2014 are at a peak. I wonder what other actors could have large enough power over their directory authority servers for the project to post this message.

Edit: Indeed, from a post below by paralelogram [0] and by checking https://atlas.torproject.org , it appears 4 of 9 are in the US. There are also two in Germany, one in the Netherlands (as well as another there that is only for bridge relays), one in Austria, and one in Sweden.

[0] https://news.ycombinator.com/item?id=8775009

cjbprime7• 12 years ago

But taking out four nodes isn't enough to cause a full consensus outage.

deciplex• 12 years ago

We still haven't discovered the thing that the US government can ask, that the Swedish government will refuse. So I think they'll be able to get five.

Zigurd• 12 years ago

It could be an opportunistic attack on Tor by MPAA members. If the FBI surveyed all their IT people regarding attacks and they all complained about Tor, they might be able to stampede the FBI and cooperating LEAs into a takedown of directory servers.

jwcrux2• 12 years ago

Assuming it's a legal entity that will be performing these seizures, I'm curious to know the case against these servers. To my (albeit somewhat limited) knowledge of the Tor network, these DA's exist solely to maintain the integrity and structure of the network, and to provide a list of known relays to clients.

I also understand that this list of trusted DA's is hardcoded into Tor clients. Since this is the case, I'd be curious how the network could be restored if there is a coordinated action on these servers.

catshirt3• 12 years ago

"I also understand that this list of trusted DA's is hardcoded into Tor clients"

forgive my ignorance, why would they do this in the first place? fear of MITM?

click1702• 12 years ago

I think so.

It wouldn't be very secure of Tor could be over-riden by an ISP inserting a bad DNS record in their servers.

boklm• 12 years ago

Because the clients need to get the list of nodes from somewhere.

You can read more about how this works at this URL: https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt

cjbprime7• 12 years ago

The project would have to publish new source code containing new servers, and get everyone to upgrade immediately. I don't think there would be another way to restore the network (which is by design).

higherpurpose3• 12 years ago

The Sony hack will probably be used as an excuse, whether that's the main reason or not. That's how the US gov operates now. They take advantage of certain situations to pass or do stuff that normally would have no chance of passing, even if those situations are barely related to what they're trying to pass.

Example: The Patriot Act written many years before 9/11 by law enforcement agencies to help them in the War on Drugs, and then shamelessly used the 9/11 excuse to pass it. If the Patriot Act was "just about terrorists", then it should've referred only to terrorists. But it didn't. And now 99 percent of NSLs are used in drug cases.

declan3• 12 years ago

I'm not sure if the above comment is downvoted because of the Patriot Act claim, but that claim happens to be correct. I wrote about this for CNET here:

http://www.cnet.com/news/how-bin-laden-and-911-attacks-shape... "Long before 9/11, the U.S. Department of Justice drafted the so-called Enhancement of Privacy and Public Safety in Cyberspace Act (PDF), which goes by the awkward and not very memorable acronym of EPPSCA. In July 2000, the Clinton administration forwarded EPPSCA to Congress, where it was introduced by Sen. Patrick Leahy (D-Vt.) and met with a generally chilly response... EPPSCA was designed to give police more authority to conduct Internet surveillance, not thwart terrorists armed with box cutters... within hours of the 9/11 attacks, the Justice Department had dusted off EPPSCA as a way to respond to bin Laden. On September 13, 2001, two days after the worst terrorist attack in U.S. history, the U.S. Senate approved the "Combating Terrorism Act of 2001," which includes portions copied directly from EPPSCA."

As for the rest of the above comment, this is likely to be a fluid situation and I'm reserving judgment until we know more. It is possible that the good folks at Tor are wrong (I'd like them to be!) and no seizure happens. Government authorities sometimes bluff.

jwcrux2• 12 years ago

Also - I've added more information here: https://news.ycombinator.com/item?id=8775530

acaloiar• 12 years ago

I think it is worth noting that, while hard-coded, this line suggests that the DA list can be overridden ( https://gitweb.torproject.org/tor.git/tree/src/or/config.c#n... ). Theoretically this should allow the Tor project to provision replacement servers and publish their IP addresses without modifying the "hard-coded" list in every Tor client. With that said, I know very little about Tor and this comment should be taken with a boulder of salt.

Aoyagi• 12 years ago

Tor remains safe to use.

What are these not-so-rare reports of mass unmasking of people then? I'm genuinely curious, not begging the question.

pyre• 12 years ago

What reports? The site seizures?

cjbprime7• 12 years ago

These unmaskings have been performed through (usually egregious) opsec failures on the part of the user, rather than performed by attacking the Tor network directly.

bashinator• 12 years ago

Also I believe there were some traffic correlation attacks where the attacker was able to get netflow data from both entrance nodes and (?) the traffic destination outside of Tor.

nominated1• 12 years ago

I'm not aware of network faults just "user errors".

Allowing js and plug-ins to run puts you in the "low hanging fruit" category.

pstrateman• 12 years ago

Tor is designed with a specific threat model.

That threat model explicitly does not provide protection against a global observer.

That means tor is NOT safe against a state level attacker with an extensive surveillance network.

higherpurpose3• 12 years ago

Well be specific. Some have been caught due to using outdated Tor software. Others, like the recent Silk Road bust, because they used "hidden services" incorrectly, and the hidden services were never actually advertised by Tor as being perfectly safe.

But the latter one has nothing to do with users, but with "website" operators inside the Tor network.

cjbprime7• 12 years ago

(Disclaimer: I am not affiliated with Tor, I'm just poking around their source code. My conclusions may be totally wrong.)

You can see the list of trusted directory authorities in Tor's src/or/config.c:

https://gitweb.torproject.org/tor.git/tree/src/or/config.c#n...

There are nine of them (actually ten, but one is just for bridges), so you'd have to disrupt at least five of them to prevent them forming a majority vote on consensus together. Looks like the countries that own the IP address allocations for each dirauth are:

Austria, Germany, Germany, Holland, Holland, Sweden, US, US, US

If the above is all correct, a US<->Germany collaboration - to pick the largest set from two countries - would be one way to cause a large problem.

bachback• 12 years ago

interesting - how does this work?

cjbprime7• 12 years ago

Which part?

higherpurpose3• 12 years ago

Could the Tor Project sue against those seizures?

chippy• 12 years ago

Would suing repair the damage? How long would it take? Could it actually be a criminal act?

coderholic• 12 years ago

That's interesting, I didn't know about these trusted authorities. Here are the IPs:

    $ curl -s https://gitweb.torproject.org/tor.git/plain/src/or/config.c | grep -Eo "([0-9]{1,3}\.){3}[0-9]{1,3}:" config.c | sed 's/://'
    128.31.0.39
    86.59.21.38
    194.109.206.212
    82.94.251.203
    131.188.40.189
    193.23.244.244
    208.83.223.34
    171.25.193.9
    154.35.32.5
    199.254.238.52

I get the same country list as you:

    $ cat ips | xargs -I% curl -s http://ipinfo.io/%/country | paste - ips | sort
    AT  86.59.21.38
    DE  131.188.40.189
    DE  193.23.244.244
    NL  194.109.206.212
    NL  82.94.251.203
    SE  171.25.193.9
    US  128.31.0.39
    US  154.35.32.5
    US  199.254.238.52
    US  208.83.223.34

And here are the organizations they're associated with:

    $ cat ips | xargs -I% curl -s http://ipinfo.io/%/org | paste ips -
    128.31.0.39 AS3 Massachusetts Institute of Technology
    86.59.21.38 AS8437 Tele2 Telecommunication GmbH
    194.109.206.212 AS3265 XS4ALL Internet BV
    82.94.251.203   AS3265 XS4ALL Internet BV
    131.188.40.189  AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
    193.23.244.244  AS50472 Chaos Computer Club e.V.
    208.83.223.34   AS40475 Applied Operations, LLC
    171.25.193.9    AS198093 Foreningen for digitala fri- och rattigheter
    154.35.32.5 AS14987 Rethem Hosting LLC
    199.254.238.52  AS16652 Riseup Networks

stingraycharles2• 12 years ago

(I'm from The Netherlands)

For what it's worth, XS4ALL has a tremendous reputation when it comes to privacy in The Netherlands, being one of the first ISPs in NL, founded by true hackers. They were the first (and only one?) that started disclosing how many subpoenas they were receiving from the government, have fought a lot against blocking TPB in court, etc -- I'm not surprised at all they are the ones hosting the Tor servers (I am a customer, and am allowed to run an Exit node, and they are very supportive when they receive abuse complaints, their entire customer support staff knows about Tor). I would be surprised if they would easily cave to a government order / seizure of their servers.

kevin_thibedeau• 12 years ago

MIT runs Lincoln Lab which is a think tank / R&D facility for the military. You have to pass through an armed checkpoint to get to the the complex located on an AF base. I would consider that node compromised already.

justcommenting4• 12 years ago

the most recently restarted dirauths appear to run Tor 0.2.6.1-alpha-dev, including four of the five US-based dirauths (moria1, Faravahar, urras, dizum). gabelmoo, tor26, longclaw, Tonga, and maatuska appear to be running Tor 0.2.5.10. dannenberg is running Tor 0.2.5.9-rc.

roger's dirauth (author of the post) moria1 (US) restarted ~1d ago and shows a blip in traffic earlier today, which may or may not have something to do with the post: https://atlas.torproject.org/#details/9695DFC35FFEB861329B9F...

peter's tor26 (austria) restarted 12h ago: https://atlas.torproject.org/#details/847B1F850344D7876491A5...

dizum (netherlands) was also recently restarted 16h ago: https://atlas.torproject.org/#details/7EA6EAD6FD83083C538F44...

Tonga (netherlands) looks mostly normal, restarted ~7d ago: https://atlas.torproject.org/#details/4A0CCD2DDC7995083D73F5...

sebastian's gabelmoo (germany) restarted 2d ago: https://atlas.torproject.org/#details/F2044413DAC2E02E3D6BCF...

CCC's dannenberg (germany) restarted 3d ago: https://atlas.torproject.org/#details/7BE683E65D48141321C5ED...

jake's urras (US) is showing relatively low bandwidth & restarted ~2d ago: https://atlas.torproject.org/#details/0AD3FA884D18F89EEA2D89...

Faravahar (US) restarted 4d ago: https://atlas.torproject.org/#details/CF6D0AAFB385BE71B8E111...

riseup's longclaw (US) restarted 9d ago: https://atlas.torproject.org/#details/74A910646BCEEFBCD2E874...

linus's maatuska (sweden) has been up for 30d: https://atlas.torproject.org/#details/BD6A829255CB08E66FBE7D...

recent activity in tor's commit log may also offer up some clues: https://gitweb.torproject.org/tor.git/log/?showmsg=1

robert_foss• 12 years ago

0.2.6.1-alpha-dev doesn't seem to contain anything earth shattering.

https://gitweb.torproject.org/tor.git

geofft• 12 years ago

How often do they tend to restart usually? (For instance, I'd be unsurprised to hear e.g. that Roger tests his commits on his dirauth, and so that server never has high service uptime, or something.)

justcommenting4• 12 years ago

i don't want to speak for roger, but my general understanding over the past few years was that roger typically appeared to run fresher alpha code on a sister relay named moriatoo (https://atlas.torproject.org/#details/5C91CC4554CA2EE1904BA6...) before upgrading moria1.

but at the moment, moriatoo is running 0.2.6.0-alpha-dev and moria1 is running 0.2.6.1-alpha-dev

uaygsfdbzf• 12 years ago

Many of these are probably running the Linux kernel, which recently had some security updates so the restarts might be related to that.

justcommenting4• 12 years ago

possibly--but it also wouldn't surprise me if these servers were running something like ksplice to avoid having to restart

click1702• 12 years ago

Is there anything that users can do to help with this? Donating money or hosting, or running a Tor node?

There wasn't any info on the blog about what regular users can do to help with this, if anything.

robertfw2• 12 years ago

The targeted servers are directory servers, which are not what the user runs. AFAIK there is nothing that can be done short of supporting TOR through donations, so they can focus on whatever needs to be done.

jloughry• 12 years ago

You're right, so I sent the Tor Project a donation through paypal. They're a U.S. 501(c)(3) non-profit organization.

mortov• 12 years ago

I think we can guess we're about to be told the North Koreans used TOR so decisive action needs to be taken against the network as part of the retaliation measures just announced.

d0mdo0ss• 12 years ago

Someone posted a somewhat toxic but somewhat valid point, and the project responded with more details about their 'source'. I add their response but it may be best to read the original post.

To be sure to keep our source safe, we're not providing more details quite yet.

But actually, we don't know many more details than the ones we posted. And as for your 'why', that's an excellent question, and one we've been wrestling with too. There are nine directory authorities, spread around the US and Europe. If they're trying to hunt down particular Tor users, most possible attacks on directory authorities would be unproductive, since those relays don't know anything about what particular Tor users are doing.

Our previous plan had been to sit tight and hope nothing happens. Then we realized that was a silly plan when we could do this one [post the warning] instead.

aburan28• 12 years ago

The United States Government will fail because even if they were to significantly disrupt the Tor network we'll pull out the Zero Knowledge Proofs on them. We have the crypto and technology to build a super resilient Tor replacement that they cannot do a single thing about. Tor is antiquated and I personally hope they take it out because it's replacement will be 100x better.

josephagoss• 12 years ago

Where is this 100x better replacement?

Lots of people around the world depend on the anonymity of Tor today and having the Government take it out, whilst indirectly kick-starting the next generation anonymity network is all and well for me and my armchair, but it's going to be life threatening for many.

Until this 100x better solution exists Tor must be kept running at any cost, many lives depend on it.

pc2g4d• 12 years ago

Sounds like time to stand up some spare directory servers, preferably in different legal jurisdictions than those currently represented.

guelo• 12 years ago

I'm surprised they're able to talk about this, seems. Like the FBI would have gone with a NSL (National Security Letter).

Havvy• 12 years ago

They haven't been sent an NSL at the time of the writing of that post. They don't have details on what the attack is, only that they think there is going to be one.

declan3• 12 years ago

This is a very big deal if it happens. Roger's linked post on the Tor site talks about "seizure" of directory authority servers; only government authorities would have that power. In the U.S. that would typically happens only after a court grants a seizure order, which would be under seal at this stage.

Of the countries where the servers are located, the U.S. has the most extreme copyright laws, which means, sadly, FedGov is the leading candidate to be behind any possible seizure.

It would be interesting if an enterprising journalist were to ask MIT, SF-based Applied Operations, and RiseUp if they've been contacted by law enforcement on this matter. Those organizations host some of the U.S.-based servers. RiseUp has a warrant canary but it hasn't been updated recently: https://help.riseup.net/en/canary

Of course we don't know what actually is going on and it all may be (I hope!) a false alarm.

PS: If multiple governments cooperate and a majority of servers are taken down, what happens to Tor after the consensus interval expires? I don't know; maybe someone more familiar with Tor does. The consensus interval was changed to 72 hours a few years ago: https://trac.torproject.org/projects/tor/ticket/7986

PPS: Remember that FedGov's "copyright infringing" domain name seizures have on occasion taken down non-infringing sites in error, as I wrote about here: http://www.cnet.com/news/dhs-abruptly-abandons-copyright-sei...

declan3• 12 years ago

Update: Someone at the Tor project kind-of-answered my question about the expiration of the consensus interval a moment ago here:

"If four out of the 9 dir auths were compromised and taken offline, then the remaining 5 will continuing publishing the consensus and the network will continue operating normally. If more than 5 are taken offline then this was a horrendously large operation and the necessary corrective actions will be taken to ensure the network remains operational." https://blog.torproject.org/blog/possible-upcoming-attempts-...

cjbprime7• 12 years ago

I don't think the change to 72 hours was merged; I think it's still at 24 hours.

PS: If multiple governments cooperate and a majority of servers are taken down, what happens to Tor after the consensus interval expires?

As I understand it, the network would die (all clients would refuse to use the consensus, and thus not connect) 24 hours after the last good consensus.

PPS: Remember that FedGov's "copyright infringing" domain name seizures have on occasion taken down non-infringing sites in error, as I wrote about here: http://www.cnet.com/news/dhs-abruptly-abandons-copyright-sei....

I'm not sure how this is relevant -- the directory authorities are not being accessed via domain name, just IP address.

geographomics2• 12 years ago

Is it really that much of a big deal though?

I would expect that each authority server's configuration data is securely and reliably backed up, so if the physical servers are seized, then a replacement can be fairly easily provisioned. Maybe some operators will even have one waiting on standby, in case of a normal hardware failure or similar.

Presumably the IP address space isn't being seized or otherwise disbanded, so it could be dropped in exactly as specified in the hard-coded configuration - that is, the same IP address and port.

Any ongoing and persistent impersonation of the server wouldn't be viable, as the long-term directory authority identity keys are kept offline.

Maybe I'm missing something here but it sounds like more of a symbolic violation, rather than a potentially catastrophic disabling event that brings down Tor.

cjbprime7• 12 years ago

I think you're probably overestimating the portability of IP addresses, and underestimating the coercive power of the organization that does the seize.

IP addresses are assigned to a network provider, not a customer. If I'm hosted by a US provider and the FBI seizes my server, is that provider going to say "sure, just spin up a new box on the old IP", or are they going to tell me to get off their network? What if the FBI has an opinion on which decision the provider should take? What if the FBI has an opinion on which action the directory operator should take?

mike_hearn7• 12 years ago

I doubt this will be a popular post, but I'll make it anyway.

If there are some seizures of directory authorities or other project infrastructure, this won't be some totally unpredictable occurrence. It was only about a month and a half ago that some relays were seized as part of a general takedown against Tor hidden services. The Tor project posted this blog in response:

https://blog.torproject.org/blog/thoughts-and-concerns-about...

That blog post convinced me to shut down my relay. The reason is, to an ambitious prosecutor this blog post looks like:

"We view law enforcement operations as attacks and are looking for ways to defeat them, because we are determined to shield the identities of our criminal clients"

... which is exactly what resulted in the operators of the Silk Roads getting arrested even though they were not personally selling drugs.

The blog post makes casual reference to the "enormous social value" of hidden services and claim they're worried about "secret police repressing dissidents", but doesn't cite any actual examples. Actually I've never heard of a hidden service that has enormous social value - whilst there are a small number of .onion addresses that aren't completely illegal or unethical, for all the examples I know of the operators are not anonymous.

To police forces around the world who keep having investigations hit a dead end because of Tor, going after the project directly will not seem very different than going after services like Liberty Reserve. The people running it are stating publicly that they will do their best to frustrate investigations, and that is dangerously close to admitting participation in a criminal conspiracy. Thin ice doesn't even begin to describe their current situation.

nate_meurer• 12 years ago

"Actually I've never heard of a hidden service that has enormous social value"

You make it sound like you've actually looked. Perhaps you've spoken to some Ukrainians, or protesters in Turkey or Honk Kong, and they've assured you they have little use for "hidden services"?

mike_hearn7• 12 years ago

I have looked (or at least paid close attention) and I am unaware of anyone in Ukraine, Turkey or Hong Kong using hidden services for political reasons.

Additionally, Tor gets way less traffic from people trying to evade national firewalls than VPN services do. They aren't the big fish in that space at all.

olalonde2• 12 years ago

I agree that they are vastly inflating the utility of Tor for people in repressive regimes given how easy it is to block Tor at an ISP level (e.g. Tor is completely blocked in China).

canjobear• 12 years ago

They pointedly didn't mention China in their list of repressive regimes: "Iran, Syria, and Russia".

I think for most people, China is the first country that comes to mind when you think about internet censorship. But my experience is that it is impossible to connect to Tor there. Maybe they are acknowledging that tacitly.

Or maybe they were trying to make the blog post more palatable to US government readers, since Iran, Syria, and Russia are currently bad guys, while things with China are supposed to be fine.

justcommenting4• 12 years ago

there are ~1200 directly connecting users [0] and ~200 bridge users [1] who might dispute the assertion that 'Tor is completely blocked in China'.

instead of casting aspersions on a free software project, i would encourage you to please help make tor more useful for these users, or to build your own alternative.

[0] https://metrics.torproject.org/userstats-relay-country.html?...

[1] https://metrics.torproject.org/userstats-bridge-country.html...

ikawe• 12 years ago

If you, like me, didn't know how Tor is being blocked in China: https://www.usenix.org/sites/default/files/conference/protec...

Interestingly it's partially the same issue - the directory servers have static IP's. ISP's are simply blocking traffic to these directory server IPs. Without access to the directory servers, can you still use Tor?

Also see above article for thoughts on how to circumvent this mode of censorship.

mrsteveman1• 12 years ago

The blog post makes casual reference to the "enormous social value" of hidden services and claim they're worried about "secret police repressing dissidents", but doesn't cite any actual examples.

I'll give you one:

Russia currently has laws that, among other things, require the author of a blog to register personal information with the government if the blog has more than 3,000 daily readers[1]. The law is specifically intended to prevent anonymity.

When working as intended, hidden services enable those blog authors to protect their identity and ensure the government doesn't harass, arrest or kill them.

[1] http://www.bbc.com/news/technology-28583669

mike_hearn7• 12 years ago

It's much, much easier for them to just write a Wordpress or Blogger blog, hosted in the USA where Russia can't get access to the logs. Or in any other jurisdiction that won't respond to Russian requests for their data.

The big advantage is - anyone can read your blog. Not just people who are willing to download and use the Tor browser.

Most famous cases of dissent in recent times have preferred to play jurisdictional arbitrage rather than use Tor. Snowden is being kept safe by Russia, his information was published by a British newspaper that then shifted reporting to New York to avoid the UK government goons. Apparently for now that's good enough.

This is why I talked about specific examples of hidden services being used in this way and actually getting real traction - I can't think of any.

mrkickling• 12 years ago

Here is one example, journalists.

sandworm3• 12 years ago

If this turns out to be (1) real and (2) linked to the Sony fiasco, then North Korea has triumphed. They have taken down two enemies in a single hack: a film and an internet technology. That puts them ahead of the MPAA and the NSA combined.

driverdan• 12 years ago

What are the specs of these servers and how much bandwidth do they require?

kordless2• 12 years ago

I'm hoping Utter.io can help with this by making the infrastructure more trustworthy in the coming years. I'll be launching a Kickstarter right after the 1st to raise money for the project (which is currently in preview mode): https://www.kickstarter.com/projects/kordless/683224456?toke...

If funded, a user governed foundation will be set up to help prevent influence by misaligned interests, such as those seen with existing providers and closed source software vendors. Infrastructure was always meant to be open, transparent and trustworthy.

Especially for those who don't know any better.

dsl3• 12 years ago

How old is this deck? AWS has 28 availability zones, and averages 4 datacenters per AZ. Way more than the 9 you claim...

kordless2• 12 years ago

First, I'd like to point out you are referring to something that isn't on the Kickstarter page, but linked to by it. You are talking about this: http://utter.io/prezo. Yes, it's a little out of date. Yes, I substitute the industry's word 'datacenter' for Amazon's term 'region'.

Three days ago I updated the longer video version from that page and put it on the Kickstarter page, down below the other video. In addition to removing other content, I edited out the amounts you are referring to because they change constantly and are less important to my pitch now I'm doing a Kickstarter campaign. Also, AWS added a 10th region to their list a few months ago. I don't 'count' the government cloud as a public offering.

It remains a truth that AWS runs out of ten geographic regions. So, 80% of the world's public cloud is run out of (by your math) <~40 physical buildings. Not a cloud, IMHO.

Besides, there doesn't appear to be any public information on how many physically different locations Amazon runs for AWS, which makes it impossible to say how many physical locations (datacenters) they run. I'm not 100% convinced that a 'zone' maps to a physical building, given my memory of ping times across zones and having issues with two neighbor zones at the same time in the early days of using AWS.

Amazon having different terminology than the industry's causes confusion and my comments reflected that confusion when I used the term 'datacenter' erroneously. FWIW, Rackspace calls their dataceneters 'datacenters': http://www.rackspace.com/about/datacenters.

Any remaining minutia related to this topic will be resolved by the end of the week. I'm updating Utter.io in preperation for the Kickstarter launch.

jgwest• 12 years ago

Seems like somebody in the DoJ just decided that Tor's balance between geeky CompSci curiosity and enabler of real-world criminal behavior has tipped too far in the latter direction. The legal case has been ripe for a while-- after all, Megaupload and many other networks have been disabled by the US government for enabling significantly LESS serious criminality. Ummm... world's biggest drug marketplace, anyone??? What's important to remember is that the gov't can't just go in and seize the directory authority servers willy-nilly. Instead, they must do it as part of a legal process against a specific, identified target. In this case, the likely target is going to be the Tor project itself and possibly the individuals leading it. The legal case might ruffle a few techie feathers but only an insignificant portion of the general public will care, and that portion can be mollified with the "stopping the bad horrible criminals" routine.

sandworm3• 12 years ago

Those were not shutdown for "enabling" criminal activity. They were shut down for actually doing criminal activity. With megaupload it was failure to abide by the DMCA, with silk road it was handling money for/from drug dealers. I cannot see how Tor has actually done anything criminal beyond what a thousand other transitory service providers do every day.

rasz_pl• 12 years ago

in case of megaupload it was totally ILLEGAL, using bogus charges

sandworm3• 12 years ago

Aside from the physical takedowns, expect a financial crackdown. Tor project assets would be seized, Paypal accounts locked, and CC services withdrawn.

haakon• 12 years ago

That would be almost too stupid, considering how Tor is financed in large by U.S. government grants.

Possible upcoming attempts to disable the Tor network

Related Stories