Spying On Tor

juct writes "The long-standing suspicion that the anonymizing network TOR is abused to catch sensitive data by Chinese, Russian, and American government agencies as well as hacking groups gets new support. Members of the Teamfurry community found TOR exit-nodes which only forward unencrypted versions of certain protocols. These peculiar configurations invite speculation as to why they are set up in this way. Another tor exit node has been caught doing MITM attacks using fake SSL certificates."

Team Furry?

[Odiumjunkie]

> Members of the Teamfurry community found TOR exit-nodes which only forward unencrypted versions of certain protocols.

Are they worried that the Chinese will intercept pictures of them dressed like this [imageshack.us]?

Whew.

[Anonymous Coward]

It's good to know the furry community is keeping us abreast of these security concerns.

Re:Conclusion:

[s20451]

Tor is so easy to abuse (if you run a tor server) it's not even funny. Just take a look at the code, it's trivial to hack. It's funny how much of the OSS community are proverbial sheeple, believing that since it's open source, it must be secure.

It's for exactly this reason that Tor should adopt AGPL. That way, if the Chinese government ran a hacked Tor server, they would have to release the source code as well and the hack would be obvious.

Re:Please help us improve our documentation.

[RobTFirefly]

If you find a reliable way to make end-users RTFM, please let us know.

Re:You Can't Sue China

[Jason Earl]

with a userid that low, you'd think you would be able to identify a joke when you see one by now.

It just goes to show that age does not necessarily bring enlightenment. Thanks for the heads up :).

Re:Conclusion:

[Anonymous Coward]

It's for exactly this reason that Tor should adopt AGPL. That way, if the Chinese government ran a hacked Tor server, they would have to release the source code as well and the hack would be obvious.

The problem is, a couple hours after suing the Chinese, you want to sue them again.

Re:You Can't Sue China

[Anonymous Coward]

Not with that attitude

Re:Please help us improve our documentation.

[Alsee]

If you find a reliable way to make end-users RTFM, please let us know.

Have you tried waterboarding?

-