{"id":50745,"date":"2020-09-17T09:01:22","date_gmt":"2020-09-17T09:01:22","guid":{"rendered":"https:\/\/www.cryptocabaret.com\/?p=50745"},"modified":"2020-09-17T09:01:22","modified_gmt":"2020-09-17T09:01:22","slug":"you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity","status":"publish","type":"post","link":"https:\/\/www.cryptocabaret.com\/?p=50745","title":{"rendered":"\u2018You Are Not Anonymous on Tor\u2019 \u2013 Study Shows Privacy Network Offers Superficial Anonymity"},"content":{"rendered":"<p><img decoding=\"async\" width=\"696\" height=\"392\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-768x432.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"'You Are Not Anonymous on Tor' - Study Shows Privacy Network Offers Superficial Anonymity\" loading=\"lazy\" srcset=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-768x432.jpg 768w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-300x169.jpg 300w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-1024x576.jpg 1024w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-696x392.jpg 696w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-1068x601.jpg 1068w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-747x420.jpg 747w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-190x107.jpg 190w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-380x214.jpg 380w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity-760x428.jpg 760w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity.jpg 1280w\" sizes=\"auto, (max-width: 696px) 100vw, 696px\"><\/p>\n<p><strong>Privacy advocates are growing leery of the Tor network these days, as recently published research has shown a great number of network\u2019s exit relays are compromised. Furthermore, on September 15, the Hacker Factor Blog published a new Tor report that shows IP addresses being uncovered. The paper called \u201cTor 0-day\u201d says that it is an open secret among the internet service community: \u201cYou are not anonymous on Tor.\u201d<\/strong><\/p>\n<p>For years now, a great number of digital currency proponents have utilized Tor and virtual private networks (VPNs) to stay anonymous while <a href=\"https:\/\/news.bitcoin.com\/beginners-guide-buying-goods-darknet\/\">sending bitcoin transactions<\/a>. The <a href=\"https:\/\/www.torproject.org\/\">Tor Project<\/a> was released 17 years ago in 2002, and it has always claimed to obfuscate internet traffic for the end-user.<\/p>\n<p>Essentially, the software written in C and Python leverages a volunteer overlay network consisting of thousands of different relayers. The very basics of this network are meant to conceal a user\u2019s activity on the internet and allow for unmonitored confidential communications.<\/p>\n<p>However, since Covid-19 started and during the months that followed a number of individuals have exposed a few of Tor\u2019s weaknesses. One Tor vulnerability exposed in August is the large-scale use of malicious relays.<\/p>\n<p>A <a href=\"https:\/\/news.bitcoin.com\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised\/\">paper written<\/a> by the researcher dubbed \u201cNusenu\u201d says 23% of Tor\u2019s current exit capacity is currently compromised. Nusenu also warned of this issue months ago in December 2019 and his research fell on deaf ears. Following Nusenu\u2019s critique, another <a href=\"https:\/\/www.hackerfactor.com\/blog\/index.php?\/archives\/896-Tor-0day-Finding-IP-Addresses.html\">scathing report<\/a> called \u201cTor 0-day\u201d details that IP addresses can be detected when they connect directly to Tor or leverage a bridge.<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter size-full wp-image-412449\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/09\/9bb893309f8b4c71e1766a551563846199f6ec87-126983.gif\" alt=\"\" width=\"596\" height=\"318\"><\/p>\n<p>The paper \u201cTor 0day\u201d stresses that it is pretty much an \u201copen secret\u201d between those who know, that users \u201care not anonymous on Tor.\u201d The research is part one of a new series and a follow up will publish data that describes \u201ca lot of vulnerabilities for Tor.\u201d The hacker describes in part one how to \u201cdetect people as they connect to the Tor network (both <a href=\"https:\/\/www.hackerfactor.com\/blog\/index.php?\/archives\/888-Tor-0day-Stopping-Tor-Connections.html\">directly<\/a> and through <a href=\"https:\/\/www.hackerfactor.com\/blog\/index.php?\/archives\/889-Tor-0day-Burning-Bridges.html\">bridges<\/a>)\u201d and why the attacks are defined as \u201czero-day attacks.\u201d<\/p>\n<p>Further, the blog post shows the reader how to identify the real network address of Tor users by <a href=\"https:\/\/www.hackerfactor.com\/blog\/index.php?\/archives\/893-Tor-0day-Tracking-Bridge-Users.html\">tracking Tor bridge users<\/a> and <a href=\"https:\/\/www.hackerfactor.com\/blog\/index.php?\/archives\/892-Tor-0day-Finding-Bridges.html\">uncovering all the bridges<\/a>. The study shows that anyone leveraging the Tor network should be very leery of these types of zero-day attacks and what\u2019s worse is \u201cnone of the exploits in [the] blog entry are new or novel,\u201d the researcher stressed. The Hacker Factor Blog author cites a paper from 2012 that identifies an \u201capproach for deanonymizing hidden services\u201d with similar Tor exploits mentioned.<\/p>\n<p>\u201cThese exploits represent a fundamental flaw in the current Tor architecture,\u201d part one of the series notes. \u201cPeople often think that Tor provides network anonymity for users and hidden services. However, Tor really only provides superficial anonymity. Tor does not protect against end-to-end correlation, and owning one guard is enough to provide that correlation for popular hidden services.\u201d<\/p>\n<p>Moreover, the blog post says that the next article in the series will be a brutal critique of the entire Tor network. It doesn\u2019t take too much imagination to understand that in 17 years, entities with an incentive (governments and law enforcement) have likely figured out how to deanonymize Tor users.<\/p>\n<p>\u201cSomeone with enough incentive can block Tor connections, uniquely track bridge users, map exit traffic to users, or find hidden service network addresses,\u201d the first \u201cTor 0-day\u201d paper concludes. \u201cWhile most of these exploits require special access (e.g., owning some Tor nodes or having service-level access from a major network provider), they are all in the realm of feasible and are all currently being exploited.\u201d<\/p>\n<p>The paper adds:<\/p>\n<blockquote>\n<p><em><strong>That\u2019s a lot of vulnerabilities for Tor. So what\u2019s left to exploit? How about\u2026 the entire Tor network. That will be the next blog entry.<\/strong><\/em><\/p>\n<\/blockquote>\n<p>Meanwhile, there is another privacy project in the works called <a href=\"https:\/\/nymtech.net\/\">Nym<\/a>, which aims to offer anonymity online but also claims it will be better than Tor, VPNs, and I2P (Invisible Internet Project).<\/p>\n<p>Nym\u2019s website also says that Tor\u2019s anonymity features can be compromised by entities capable of \u201cmonitoring the entire network\u2019s \u2018entry\u2019 and \u2018exit\u2019 nodes.\u201d In contrast, the Nym project\u2019s \u2018<a href=\"https:\/\/nymtech.net\/nym-litepaper.pdf\">lite paper<\/a>\u2019 details that the Nym network \u201cis a decentralized and tokenized infrastructure providing holistic privacy from the network layer to the application layer.\u201d<\/p>\n<figure aria-describedby=\"caption-attachment-412452\" class=\"wp-caption aligncenter\"><img decoding=\"async\" loading=\"lazy\" class=\"wp-image-412452\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/09\/nym-scaled.jpg\" alt=\"\" width=\"489\" height=\"413\" srcset=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/09\/nym-scaled.jpg 2560w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-300x253.jpg 300w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-1024x865.jpg 1024w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-768x649.jpg 768w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-1536x1297.jpg 1536w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-2048x1730.jpg 2048w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-696x588.jpg 696w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-1392x1176.jpg 1392w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-1068x902.jpg 1068w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-497x420.jpg 497w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/09\/nym-1920x1622.jpg 1920w\" sizes=\"auto, (max-width: 489px) 100vw, 489px\"><figcaption class=\"wp-caption-text\">The Nym project recently initiated a tokenized testnet experiment with over a 100 mixnodes and users will be rewarded in bitcoin.<\/figcaption><\/figure>\n<p>Nym utilizes a mixnet that aims to protect a user\u2019s network traffic and mixes are rewarded for the mixing process.<\/p>\n<p>\u201cThe intensive but useful computation needed to route packets on behalf of other users in a privacy-enhanced manner\u2014rather than mining,\u201d the lite paper explains. Furthermore, Nym is compatible with any blockchain as the \u201cNym blockchain maintains the state of credentials and the operations of the mixnet.\u201d<\/p>\n<p>The Nym team recently invoked a <a href=\"https:\/\/form.typeform.com\/to\/eVxkdQ2p\">tokenized testnet experiment<\/a> and is leveraging <a href=\"https:\/\/markets.bitcoin.com\/crypto\/BTC\">bitcoin (BTC)<\/a> for rewards. The announcement says that a great number of people set up mixnodes and they had to close the testing round because it had gone over 100 mixnodes. Although, individuals can set up a mixnode to be prepared for the next round, the Nym development team\u2019s website details.<\/p>\n<p><em><strong>What do you think about the Hacker Factor Blog\u2019s scathing review concerning Tor exploits? Let us know what you think about this subject in the comments section below. <\/strong><\/em><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/news.bitcoin.com\/you-are-not-anonymous-on-tor-study-shows-privacy-network-offers-superficial-anonymity\/\">\u2018You Are Not Anonymous on Tor\u2019 \u2013 Study Shows Privacy Network Offers Superficial Anonymity<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/news.bitcoin.com\/\">Bitcoin News<\/a>.<\/p>\n<p class=\"wpematico_credit\"><small>Powered by <a href=\"http:\/\/www.wpematico.com\" target=\"_blank\" rel=\"noopener noreferrer\">WPeMatico<\/a><\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy advocates are growing leery of the Tor network these days, as recently published research has shown a great number of network\u2019s exit relays are compromised. Furthermore, on September 15, the Hacker Factor Blog published a new Tor report that shows IP addresses being uncovered. The paper called \u201cTor 0-day\u201d says that it is an [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":50746,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[309],"tags":[],"class_list":["post-50745","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/50745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=50745"}],"version-history":[{"count":0,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/50745\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/media\/50746"}],"wp:attachment":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=50745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=50745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=50745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}