Conversation

Notices

1. Embed this notice
   screwlisp (screwtape@mastodon.sdf.org)'s status on Tuesday, 19-Nov-2024 13:22:52 JST screwlisp

   @MxVerda oh I remember when the German police were raiding German tor nodes, apparently because they believed they could deanonymize tor users with access to the node. Turns out they could, I guess. What a shocking end to that story.

   #cautionaryTales for you, #veilid

   • Anthk repeated this.
   • Embed this notice
     screwlisp (screwtape@mastodon.sdf.org)'s status on Tuesday, 19-Nov-2024 13:23:47 JST screwlisp

     in reply to

     @MxVerda oh, it was trivial (timing analysis)

   • Embed this notice
     screwlisp (screwtape@mastodon.sdf.org)'s status on Tuesday, 19-Nov-2024 13:42:10 JST screwlisp

     in reply to

     • kakafarm

     @kakafarm I used the word trivial kinda wrongly. (Evidently) at the time this happened, the police used a known and already mitigated vulnerability, but the user was using unupdated software. Allowing that the user was using at-the-time outdated software, police were able to figure out what to seize to look for logs enabling their timing attack.

     Though what I read, linked by Schneier, tor believes the journalist contacting them for a statement was withholding key information from them.

   • Embed this notice
     kakafarm (kakafarm@shitposter.world)'s status on Tuesday, 19-Nov-2024 13:42:11 JST kakafarm

     in reply to
     @screwtape Why do people bother writing such tools if they're so trivial to break?