D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] OT: NSA "compromising" TOR

 

On Sun, 6 Oct 2013, Tremayne, Steve wrote:
In short, I believe that if you use a recent Tor Bundle, or (better?) a release of Tails (https://tails.boum.org), say, like, in a VM booted off a Tails ISO (with no virtual hard-disk), then you're back in anonymity.

There was a vulnerability in a recent version of the Tor Browser Bundle that leaked your real IP address to a website if it included some specially crafted JavaScript code. That vulnerability has since been fixed, but there is no guarantee that similar vulnerabilities don't exist.

There are many other ways in which you can leak information that could lead to your identity while using Tor.

The main gist of the story, however, is that the NSA admits that Tor is doing a lot of things right and that, in most cases, those using Tor are indeed anonymous (to them).

Martijn.

--
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq