Jimmy Dioxin wrote:
The US Government also gets extensive use out of Tor. Law enforcement
uses it for informants etc. As explained on the Tor website, this is
actually a good thing as it makes you more anonymous (are you a fed, a
journalist, somebody looking for porn, etc)
Jimmy Dioxin
Actually, you haven't really worked it out yet, so let me try and put
you on the right track.
If you have no protection from a global adversary using timing attacks,
who had such massive access then there is NO anonymity for the ordinary
Tor user, because there is ALWAYS a timing attack solution (from
automated passive data analysis) which identifies the originating ip
making exit node to open net request. Even the location of Tor hidden
services and their users is easy (and automatic).
So it matters not a jot that the US mil or gov uses the Tor service
itself, even assuming that they are not using a modified Tor client to
improve their anonymity and possibly aso identify their streams from the
rest (only they will know how this can be done) .
Think military, think intel community and never assume they are
"playing the game". What would you do in their jobs?
On 08/14/2010 07:26 AM, Anon Mus wrote:
Jimmy Dioxin wrote:
Hey Folks,
Cryptome has posted the Tor Project 2008 Tax Return available at:
http://cryptome.org/0002/tor-2008.zip
As many know, all US non-profit corporation returns are available upon
request by the public.
Firstly, people need to look through these returns in the same way we
audit code. Looking at funding sources and expenditures is important to
insuring Tor is a useful anonymity tool for years to come.
Thanks for this.
It looks like 90% of the funding is from the US, nearly all US government.
Internews Europe - France $183,180 (35.6%)
(http://www.sourcewatch.org/index.php?title=Internews)
Stichting Nlnet - Netherlands $42,931
International Broadcasting $260,000 (50.5%))
(http://en.wikipedia.org/wiki/International_Broadcasting_Bureau)
Google US $28,500 (5.5%)
Total $514,611
Add to this the number of Tor nodes run from US institutions (many at US
gov funded edu's) and you should be able to see who that "Global
Adversary" is!
**** US - GOV ****
So perhaps we should not expect Tor to protect us from the hand that
feeds it (and anyone else who has access to their data)
Secondly, can the Tor project release these returns on the site for the
above purpose? I don't think there needs to be some onerous accounting
process for reporting to the public (ya'll have better things to do
anyways), but these returns would be nice to have in the interest of
transparency.
Thanks,
Jimmy Dioxin
***********************************************************************
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talk in the body. http://archives.seul.org/or/talk/
***********************************************************************
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talk in the body. http://archives.seul.org/or/talk/