this post was submitted on 08 Apr 2025
687 points (99.4% liked)

Open Source

35799 readers
136 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 7 points 6 days ago (1 children)
[–] [email protected] 1 points 6 days ago (2 children)

The last reply I will make.

From September 19 2024

"In response, the Tor Project acknowledged that one user of an outdated application called Ricochet was likely deanonymized through a “guard discovery attack.” However, they emphasized that this vulnerability has since been patched in current versions of Tor software."

https://cybersecuritynews.com/tor-claims-network-safe/

[–] [email protected] 3 points 6 days ago

but that wasn't his last reply

[–] [email protected] 2 points 6 days ago (2 children)

Excuse me? Are you saying using guard discovery is a backdoor someone gave to the government? I mean, you can think whatever, but the technology isn't really.. backdoorable? It doesn't make sense in the context. Where will the backdoor lead? It has no where to go.

[–] [email protected] 3 points 6 days ago (1 children)

(I am a different person, not arguing anything about this particular vulnerability or the government's funding of Tor.)

I think you're defining backdoor too literally. I get your point, but colloquially it just means to get something nefarious in. If someone is saying "the government has a backdoor in an encryption algorithm" it would mean they believe the government has a vulnerability in that allows them to easily break the encryption, not necessarily a separate "door" or something.

[–] [email protected] 0 points 4 days ago

Yeah the government has an institutional thing I forget what it is called, with massive amount of known exploits. That's not backdoors. A backdoor is a "planted" exploit, not a discovered exploit. It makes no sense to call all exploits backdoors.