▲ 360 ▼ Tor’s shadowy reputation will only end if we all use it | Engadget (www.engadget.com) submitted 3 years ago by seasonone@opidea.xyz to c/technology@beehaw.org 152 comments fedilink hide all child comments
[–] l0v9ZU5Z@feddit.de 34 points 3 years ago (1 child) Actual legal risks and consequences don't go away by applying wishful thinking. permalink fedilink source hideshow 2 child comments replies: [–] deFrisselle@lemmy.sdf.org 16 points 3 years ago (3 children) Which are what permalink fedilink source parent hideshow 6 child comments replies: [–] ErgodicTangle@feddit.de 29 points 3 years ago (2 children) I am not sure what he's hinting at. Just using Tor doesn't bear any legal risks. Hosting an exit node is different, as depending on the country you might get into serious trouble if certain traffic goes through it. permalink fedilink source parent hideshow 4 child comments replies: [–] TWeaK@lemm.ee 11 points 3 years ago (1 child) Yes exactly, and I think there have been stories recently where the exit node host has been held liable for content that's gone through it.Which is complete bullshit, but the unfortunate reality is that the legal system doesn't need to understand technology to regulate it. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 4 points 3 years ago* (1 child) It's not bullshit. If A has proof your system launched an attack, or sent CSAM, to another system, but your only defense is "I let anyone use my system in that way", then at the very least you're an accomplice. permalink fedilink source parent hideshow 2 child comments replies: [–] TWeaK@lemm.ee 2 points 3 years ago (1 child) It is bullshit, because it puts the onus of policing everything on any service provider. If a TOR exit node provider is responsible for all traffic through their node, then an ISP is responsible for all traffic through them to their users - yet it is not reasonable for ISP's to do this. Nor should it be acceptable by law and even less so if the purpose is for law enforcement to bypass the warrant system by having private parties do the investigation for them. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago Well, the law enforcement ship has sailed a long time ago, it's more of a flotilla by now. Data communication service providers (including ISPs) have some customer identification and data retention requirements in exchange for immunity from the data itself, but otherwise —reasonabke or not— there are more and more traffic policing laws that get introduced for ISPs to abide. By starting a Tor Exit node, you become a service provider, and the same laws start to apply. It's no joke that we live in a surveillance state, just that some go "full surveillance" like China, while others go "slightly less in-your-face surveillance" like the US/EU. permalink fedilink source parent [–] jlou@mastodon.social 2 points 3 years ago* (1 child) Would it be possible to allow exit nodes to blacklist specific kinds of traffic and somehow privately verify that the traffic is not one of the blacklisted kinds (zero knowledge proof perhaps sorry not a CS person)? permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago* (last edited 3 years ago) (1 child) An exit node can put in place any filters, blacklists, mitm, exploit injection, logging, and anything else it wants... on unencrypted traffic. Using HTTPS through an exit node, limits all of that to the destination of the traffic, there is no way to get a ZK proof of all the kinds of possible traffic and contents that can exist. permalink fedilink source parent hideshow 2 child comments replies: [–] jlou@mastodon.social 2 points 3 years ago* What I meant was blacklisting certain destinations. It obviously wouldn't prevent all malicious traffic permalink fedilink source parent [–] CanadaPlus@lemmy.sdf.org 7 points 3 years ago Yeah, is this guy living in China? permalink fedilink source parent [–] Quexotic@beehaw.org 6 points 3 years ago (2 children) To give you an idea, last time I used Tor, I suddenly started to get a bunch of connection attempts from the FBI. Was I doing anything illegal? Nope. Was TOR a legal liability? You betcha. permalink fedilink source parent hideshow 4 child comments replies: [–] xvlc@feddit.de 29 points 3 years ago (1 child) Connection attempts from the FBI? Could you specify that a bit further? permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 1 point 3 years ago (1 child) I was using peerblock and one of the blocklists contained known governmental IP addresses. Those blocked connections began quickly filling the logs. Spooked the crap outta me. It's been a few years since I did that, so I could have that detail wrong. I know it was for sure one of the three letter acronyms, DOD, FBI, CIA, but they were definitely incoming. permalink fedilink source parent hideshow 2 child comments replies: [–] xvlc@feddit.de 1 point 3 years ago (1 child) That does not sound plausible to me. Typically, your own computer would be behind a router that is either doing NAT or has a firewall (probably the former). Any incoming traffic would be directed to the router without any chance of reaching your computer. Whatever you saw was either outgoing traffic or incoming traffic in response to connections initiated by your own computer. permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 2 points 3 years ago Consider this, the Tor software was accepting connections from government IPs. Regardless of whether it was active intrusion or a significant portion of the Tor network, (at that time) had a number of governmental IP ranges in it, It's enough to dissuade my use, at least without more significant OpSec. I do understand your point though. permalink fedilink source parent [–] Eggyhead@kbin.social 15 points 3 years ago* (1 child) I suddenly started to get a bunch of connection attempts from the FBI. How can I observe connection attempts like this? permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 1 point 3 years ago I use peerblock and had some good blocklists set up. The hardest part should be finding peerblock or a more modern fork, the blocklists are mostly public. Helps keep from connecting to known bad actors. permalink fedilink source parent
[–] deFrisselle@lemmy.sdf.org 16 points 3 years ago (3 children) Which are what permalink fedilink source parent hideshow 6 child comments replies: [–] ErgodicTangle@feddit.de 29 points 3 years ago (2 children) I am not sure what he's hinting at. Just using Tor doesn't bear any legal risks. Hosting an exit node is different, as depending on the country you might get into serious trouble if certain traffic goes through it. permalink fedilink source parent hideshow 4 child comments replies: [–] TWeaK@lemm.ee 11 points 3 years ago (1 child) Yes exactly, and I think there have been stories recently where the exit node host has been held liable for content that's gone through it.Which is complete bullshit, but the unfortunate reality is that the legal system doesn't need to understand technology to regulate it. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 4 points 3 years ago* (1 child) It's not bullshit. If A has proof your system launched an attack, or sent CSAM, to another system, but your only defense is "I let anyone use my system in that way", then at the very least you're an accomplice. permalink fedilink source parent hideshow 2 child comments replies: [–] TWeaK@lemm.ee 2 points 3 years ago (1 child) It is bullshit, because it puts the onus of policing everything on any service provider. If a TOR exit node provider is responsible for all traffic through their node, then an ISP is responsible for all traffic through them to their users - yet it is not reasonable for ISP's to do this. Nor should it be acceptable by law and even less so if the purpose is for law enforcement to bypass the warrant system by having private parties do the investigation for them. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago Well, the law enforcement ship has sailed a long time ago, it's more of a flotilla by now. Data communication service providers (including ISPs) have some customer identification and data retention requirements in exchange for immunity from the data itself, but otherwise —reasonabke or not— there are more and more traffic policing laws that get introduced for ISPs to abide. By starting a Tor Exit node, you become a service provider, and the same laws start to apply. It's no joke that we live in a surveillance state, just that some go "full surveillance" like China, while others go "slightly less in-your-face surveillance" like the US/EU. permalink fedilink source parent [–] jlou@mastodon.social 2 points 3 years ago* (1 child) Would it be possible to allow exit nodes to blacklist specific kinds of traffic and somehow privately verify that the traffic is not one of the blacklisted kinds (zero knowledge proof perhaps sorry not a CS person)? permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago* (last edited 3 years ago) (1 child) An exit node can put in place any filters, blacklists, mitm, exploit injection, logging, and anything else it wants... on unencrypted traffic. Using HTTPS through an exit node, limits all of that to the destination of the traffic, there is no way to get a ZK proof of all the kinds of possible traffic and contents that can exist. permalink fedilink source parent hideshow 2 child comments replies: [–] jlou@mastodon.social 2 points 3 years ago* What I meant was blacklisting certain destinations. It obviously wouldn't prevent all malicious traffic permalink fedilink source parent [–] CanadaPlus@lemmy.sdf.org 7 points 3 years ago Yeah, is this guy living in China? permalink fedilink source parent [–] Quexotic@beehaw.org 6 points 3 years ago (2 children) To give you an idea, last time I used Tor, I suddenly started to get a bunch of connection attempts from the FBI. Was I doing anything illegal? Nope. Was TOR a legal liability? You betcha. permalink fedilink source parent hideshow 4 child comments replies: [–] xvlc@feddit.de 29 points 3 years ago (1 child) Connection attempts from the FBI? Could you specify that a bit further? permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 1 point 3 years ago (1 child) I was using peerblock and one of the blocklists contained known governmental IP addresses. Those blocked connections began quickly filling the logs. Spooked the crap outta me. It's been a few years since I did that, so I could have that detail wrong. I know it was for sure one of the three letter acronyms, DOD, FBI, CIA, but they were definitely incoming. permalink fedilink source parent hideshow 2 child comments replies: [–] xvlc@feddit.de 1 point 3 years ago (1 child) That does not sound plausible to me. Typically, your own computer would be behind a router that is either doing NAT or has a firewall (probably the former). Any incoming traffic would be directed to the router without any chance of reaching your computer. Whatever you saw was either outgoing traffic or incoming traffic in response to connections initiated by your own computer. permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 2 points 3 years ago Consider this, the Tor software was accepting connections from government IPs. Regardless of whether it was active intrusion or a significant portion of the Tor network, (at that time) had a number of governmental IP ranges in it, It's enough to dissuade my use, at least without more significant OpSec. I do understand your point though. permalink fedilink source parent [–] Eggyhead@kbin.social 15 points 3 years ago* (1 child) I suddenly started to get a bunch of connection attempts from the FBI. How can I observe connection attempts like this? permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 1 point 3 years ago I use peerblock and had some good blocklists set up. The hardest part should be finding peerblock or a more modern fork, the blocklists are mostly public. Helps keep from connecting to known bad actors. permalink fedilink source parent
[–] ErgodicTangle@feddit.de 29 points 3 years ago (2 children) I am not sure what he's hinting at. Just using Tor doesn't bear any legal risks. Hosting an exit node is different, as depending on the country you might get into serious trouble if certain traffic goes through it. permalink fedilink source parent hideshow 4 child comments replies: [–] TWeaK@lemm.ee 11 points 3 years ago (1 child) Yes exactly, and I think there have been stories recently where the exit node host has been held liable for content that's gone through it.Which is complete bullshit, but the unfortunate reality is that the legal system doesn't need to understand technology to regulate it. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 4 points 3 years ago* (1 child) It's not bullshit. If A has proof your system launched an attack, or sent CSAM, to another system, but your only defense is "I let anyone use my system in that way", then at the very least you're an accomplice. permalink fedilink source parent hideshow 2 child comments replies: [–] TWeaK@lemm.ee 2 points 3 years ago (1 child) It is bullshit, because it puts the onus of policing everything on any service provider. If a TOR exit node provider is responsible for all traffic through their node, then an ISP is responsible for all traffic through them to their users - yet it is not reasonable for ISP's to do this. Nor should it be acceptable by law and even less so if the purpose is for law enforcement to bypass the warrant system by having private parties do the investigation for them. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago Well, the law enforcement ship has sailed a long time ago, it's more of a flotilla by now. Data communication service providers (including ISPs) have some customer identification and data retention requirements in exchange for immunity from the data itself, but otherwise —reasonabke or not— there are more and more traffic policing laws that get introduced for ISPs to abide. By starting a Tor Exit node, you become a service provider, and the same laws start to apply. It's no joke that we live in a surveillance state, just that some go "full surveillance" like China, while others go "slightly less in-your-face surveillance" like the US/EU. permalink fedilink source parent [–] jlou@mastodon.social 2 points 3 years ago* (1 child) Would it be possible to allow exit nodes to blacklist specific kinds of traffic and somehow privately verify that the traffic is not one of the blacklisted kinds (zero knowledge proof perhaps sorry not a CS person)? permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago* (last edited 3 years ago) (1 child) An exit node can put in place any filters, blacklists, mitm, exploit injection, logging, and anything else it wants... on unencrypted traffic. Using HTTPS through an exit node, limits all of that to the destination of the traffic, there is no way to get a ZK proof of all the kinds of possible traffic and contents that can exist. permalink fedilink source parent hideshow 2 child comments replies: [–] jlou@mastodon.social 2 points 3 years ago* What I meant was blacklisting certain destinations. It obviously wouldn't prevent all malicious traffic permalink fedilink source parent
[–] TWeaK@lemm.ee 11 points 3 years ago (1 child) Yes exactly, and I think there have been stories recently where the exit node host has been held liable for content that's gone through it.Which is complete bullshit, but the unfortunate reality is that the legal system doesn't need to understand technology to regulate it. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 4 points 3 years ago* (1 child) It's not bullshit. If A has proof your system launched an attack, or sent CSAM, to another system, but your only defense is "I let anyone use my system in that way", then at the very least you're an accomplice. permalink fedilink source parent hideshow 2 child comments replies: [–] TWeaK@lemm.ee 2 points 3 years ago (1 child) It is bullshit, because it puts the onus of policing everything on any service provider. If a TOR exit node provider is responsible for all traffic through their node, then an ISP is responsible for all traffic through them to their users - yet it is not reasonable for ISP's to do this. Nor should it be acceptable by law and even less so if the purpose is for law enforcement to bypass the warrant system by having private parties do the investigation for them. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago Well, the law enforcement ship has sailed a long time ago, it's more of a flotilla by now. Data communication service providers (including ISPs) have some customer identification and data retention requirements in exchange for immunity from the data itself, but otherwise —reasonabke or not— there are more and more traffic policing laws that get introduced for ISPs to abide. By starting a Tor Exit node, you become a service provider, and the same laws start to apply. It's no joke that we live in a surveillance state, just that some go "full surveillance" like China, while others go "slightly less in-your-face surveillance" like the US/EU. permalink fedilink source parent
[–] jarfil@beehaw.org 4 points 3 years ago* (1 child) It's not bullshit. If A has proof your system launched an attack, or sent CSAM, to another system, but your only defense is "I let anyone use my system in that way", then at the very least you're an accomplice. permalink fedilink source parent hideshow 2 child comments replies: [–] TWeaK@lemm.ee 2 points 3 years ago (1 child) It is bullshit, because it puts the onus of policing everything on any service provider. If a TOR exit node provider is responsible for all traffic through their node, then an ISP is responsible for all traffic through them to their users - yet it is not reasonable for ISP's to do this. Nor should it be acceptable by law and even less so if the purpose is for law enforcement to bypass the warrant system by having private parties do the investigation for them. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago Well, the law enforcement ship has sailed a long time ago, it's more of a flotilla by now. Data communication service providers (including ISPs) have some customer identification and data retention requirements in exchange for immunity from the data itself, but otherwise —reasonabke or not— there are more and more traffic policing laws that get introduced for ISPs to abide. By starting a Tor Exit node, you become a service provider, and the same laws start to apply. It's no joke that we live in a surveillance state, just that some go "full surveillance" like China, while others go "slightly less in-your-face surveillance" like the US/EU. permalink fedilink source parent
[–] TWeaK@lemm.ee 2 points 3 years ago (1 child) It is bullshit, because it puts the onus of policing everything on any service provider. If a TOR exit node provider is responsible for all traffic through their node, then an ISP is responsible for all traffic through them to their users - yet it is not reasonable for ISP's to do this. Nor should it be acceptable by law and even less so if the purpose is for law enforcement to bypass the warrant system by having private parties do the investigation for them. permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago Well, the law enforcement ship has sailed a long time ago, it's more of a flotilla by now. Data communication service providers (including ISPs) have some customer identification and data retention requirements in exchange for immunity from the data itself, but otherwise —reasonabke or not— there are more and more traffic policing laws that get introduced for ISPs to abide. By starting a Tor Exit node, you become a service provider, and the same laws start to apply. It's no joke that we live in a surveillance state, just that some go "full surveillance" like China, while others go "slightly less in-your-face surveillance" like the US/EU. permalink fedilink source parent
[–] jarfil@beehaw.org 2 points 3 years ago Well, the law enforcement ship has sailed a long time ago, it's more of a flotilla by now. Data communication service providers (including ISPs) have some customer identification and data retention requirements in exchange for immunity from the data itself, but otherwise —reasonabke or not— there are more and more traffic policing laws that get introduced for ISPs to abide. By starting a Tor Exit node, you become a service provider, and the same laws start to apply. It's no joke that we live in a surveillance state, just that some go "full surveillance" like China, while others go "slightly less in-your-face surveillance" like the US/EU. permalink fedilink source parent
[–] jlou@mastodon.social 2 points 3 years ago* (1 child) Would it be possible to allow exit nodes to blacklist specific kinds of traffic and somehow privately verify that the traffic is not one of the blacklisted kinds (zero knowledge proof perhaps sorry not a CS person)? permalink fedilink source parent hideshow 2 child comments replies: [–] jarfil@beehaw.org 2 points 3 years ago* (last edited 3 years ago) (1 child) An exit node can put in place any filters, blacklists, mitm, exploit injection, logging, and anything else it wants... on unencrypted traffic. Using HTTPS through an exit node, limits all of that to the destination of the traffic, there is no way to get a ZK proof of all the kinds of possible traffic and contents that can exist. permalink fedilink source parent hideshow 2 child comments replies: [–] jlou@mastodon.social 2 points 3 years ago* What I meant was blacklisting certain destinations. It obviously wouldn't prevent all malicious traffic permalink fedilink source parent
[–] jarfil@beehaw.org 2 points 3 years ago* (last edited 3 years ago) (1 child) An exit node can put in place any filters, blacklists, mitm, exploit injection, logging, and anything else it wants... on unencrypted traffic. Using HTTPS through an exit node, limits all of that to the destination of the traffic, there is no way to get a ZK proof of all the kinds of possible traffic and contents that can exist. permalink fedilink source parent hideshow 2 child comments replies: [–] jlou@mastodon.social 2 points 3 years ago* What I meant was blacklisting certain destinations. It obviously wouldn't prevent all malicious traffic permalink fedilink source parent
[–] jlou@mastodon.social 2 points 3 years ago* What I meant was blacklisting certain destinations. It obviously wouldn't prevent all malicious traffic permalink fedilink source parent
[–] CanadaPlus@lemmy.sdf.org 7 points 3 years ago Yeah, is this guy living in China? permalink fedilink source parent
[–] Quexotic@beehaw.org 6 points 3 years ago (2 children) To give you an idea, last time I used Tor, I suddenly started to get a bunch of connection attempts from the FBI. Was I doing anything illegal? Nope. Was TOR a legal liability? You betcha. permalink fedilink source parent hideshow 4 child comments replies: [–] xvlc@feddit.de 29 points 3 years ago (1 child) Connection attempts from the FBI? Could you specify that a bit further? permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 1 point 3 years ago (1 child) I was using peerblock and one of the blocklists contained known governmental IP addresses. Those blocked connections began quickly filling the logs. Spooked the crap outta me. It's been a few years since I did that, so I could have that detail wrong. I know it was for sure one of the three letter acronyms, DOD, FBI, CIA, but they were definitely incoming. permalink fedilink source parent hideshow 2 child comments replies: [–] xvlc@feddit.de 1 point 3 years ago (1 child) That does not sound plausible to me. Typically, your own computer would be behind a router that is either doing NAT or has a firewall (probably the former). Any incoming traffic would be directed to the router without any chance of reaching your computer. Whatever you saw was either outgoing traffic or incoming traffic in response to connections initiated by your own computer. permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 2 points 3 years ago Consider this, the Tor software was accepting connections from government IPs. Regardless of whether it was active intrusion or a significant portion of the Tor network, (at that time) had a number of governmental IP ranges in it, It's enough to dissuade my use, at least without more significant OpSec. I do understand your point though. permalink fedilink source parent [–] Eggyhead@kbin.social 15 points 3 years ago* (1 child) I suddenly started to get a bunch of connection attempts from the FBI. How can I observe connection attempts like this? permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 1 point 3 years ago I use peerblock and had some good blocklists set up. The hardest part should be finding peerblock or a more modern fork, the blocklists are mostly public. Helps keep from connecting to known bad actors. permalink fedilink source parent
[–] xvlc@feddit.de 29 points 3 years ago (1 child) Connection attempts from the FBI? Could you specify that a bit further? permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 1 point 3 years ago (1 child) I was using peerblock and one of the blocklists contained known governmental IP addresses. Those blocked connections began quickly filling the logs. Spooked the crap outta me. It's been a few years since I did that, so I could have that detail wrong. I know it was for sure one of the three letter acronyms, DOD, FBI, CIA, but they were definitely incoming. permalink fedilink source parent hideshow 2 child comments replies: [–] xvlc@feddit.de 1 point 3 years ago (1 child) That does not sound plausible to me. Typically, your own computer would be behind a router that is either doing NAT or has a firewall (probably the former). Any incoming traffic would be directed to the router without any chance of reaching your computer. Whatever you saw was either outgoing traffic or incoming traffic in response to connections initiated by your own computer. permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 2 points 3 years ago Consider this, the Tor software was accepting connections from government IPs. Regardless of whether it was active intrusion or a significant portion of the Tor network, (at that time) had a number of governmental IP ranges in it, It's enough to dissuade my use, at least without more significant OpSec. I do understand your point though. permalink fedilink source parent
[–] Quexotic@beehaw.org 1 point 3 years ago (1 child) I was using peerblock and one of the blocklists contained known governmental IP addresses. Those blocked connections began quickly filling the logs. Spooked the crap outta me. It's been a few years since I did that, so I could have that detail wrong. I know it was for sure one of the three letter acronyms, DOD, FBI, CIA, but they were definitely incoming. permalink fedilink source parent hideshow 2 child comments replies: [–] xvlc@feddit.de 1 point 3 years ago (1 child) That does not sound plausible to me. Typically, your own computer would be behind a router that is either doing NAT or has a firewall (probably the former). Any incoming traffic would be directed to the router without any chance of reaching your computer. Whatever you saw was either outgoing traffic or incoming traffic in response to connections initiated by your own computer. permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 2 points 3 years ago Consider this, the Tor software was accepting connections from government IPs. Regardless of whether it was active intrusion or a significant portion of the Tor network, (at that time) had a number of governmental IP ranges in it, It's enough to dissuade my use, at least without more significant OpSec. I do understand your point though. permalink fedilink source parent
[–] xvlc@feddit.de 1 point 3 years ago (1 child) That does not sound plausible to me. Typically, your own computer would be behind a router that is either doing NAT or has a firewall (probably the former). Any incoming traffic would be directed to the router without any chance of reaching your computer. Whatever you saw was either outgoing traffic or incoming traffic in response to connections initiated by your own computer. permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 2 points 3 years ago Consider this, the Tor software was accepting connections from government IPs. Regardless of whether it was active intrusion or a significant portion of the Tor network, (at that time) had a number of governmental IP ranges in it, It's enough to dissuade my use, at least without more significant OpSec. I do understand your point though. permalink fedilink source parent
[–] Quexotic@beehaw.org 2 points 3 years ago Consider this, the Tor software was accepting connections from government IPs. Regardless of whether it was active intrusion or a significant portion of the Tor network, (at that time) had a number of governmental IP ranges in it, It's enough to dissuade my use, at least without more significant OpSec. I do understand your point though. permalink fedilink source parent
[–] Eggyhead@kbin.social 15 points 3 years ago* (1 child) I suddenly started to get a bunch of connection attempts from the FBI. How can I observe connection attempts like this? permalink fedilink source parent hideshow 2 child comments replies: [–] Quexotic@beehaw.org 1 point 3 years ago I use peerblock and had some good blocklists set up. The hardest part should be finding peerblock or a more modern fork, the blocklists are mostly public. Helps keep from connecting to known bad actors. permalink fedilink source parent
[–] Quexotic@beehaw.org 1 point 3 years ago I use peerblock and had some good blocklists set up. The hardest part should be finding peerblock or a more modern fork, the blocklists are mostly public. Helps keep from connecting to known bad actors. permalink fedilink source parent