Re:Detailing the CMU Tor Hidden Services Attack and Tor's Re...
by kbart on Wednesday December 02, 2015 @03:40AM
(#10661736)
What are the alternatives that work well internationally? Only Bitcoin comes to my mind, but it's a mess to buy, conversation rates fluctuate wildly and is far from easy to use.
Re:Detailing the CMU Tor Hidden Services Attack and Tor's Re...
by yeukhon on Tuesday December 01, 2015 @07:36PM
(#10660015)
Why does Tor need a director? If it is truly a decentralized network, why should the project require centralized project administrators? Because of funding and donation? Let's put the whole spread the initiative PR stuff away (of course that cost money), plus the hosting cost, what else do they use the donation for?
Re:Detailing the CMU Tor Hidden Services Attack and Tor's Re...
by yeukhon on Tuesday December 01, 2015 @07:44PM
(#10660053)
Thank you for the info. This is helpful to know.
[edit] Have you folks looked at https://gratipay.com/search as another source of crowdfunding for developers? I am not sure which one is more effective for general funding.
Re:Detailing the CMU Tor Hidden Services Attack and Tor's Re...
by zaroth on Wednesday December 02, 2015 @01:39AM
(#10661380)
So who is going to get the billing record for all those hosts they spun up? Hard proof should not be that hard to come by, so I'm just waiting to see that. I am more likely to believe Tor than CMU because of the way the research was pulled, and it would be nice to pin them to it.
Feb: Understaffed Tor minimized security warning. "Activity in the past has looked suspicious at the time, but ultimately did stuff that helped advance our art."
Re:Detailing the CMU Tor Hidden Services Attack and Tor's Re...
by iamsohungry on Wednesday December 02, 2015 @05:39AM
(#10662158)
Do you have a source on Tor being funded by the CIA?
It's disingenuous to say that Tor reacted only after being deanonymized personally:
1. It was well known that Nick Mathewson worked for Tor long before this attack.
2. Tor added code that allowed them to detect the attack before they knew their IPs were deanonymized: that's the only way they found out their IPs were deanonymized.
Become a crowdfunder.
https://blog.torproject.org/blog/our-first-real-donations-ca...
https://www.torproject.org/donate/donate-options.html.en
You can even send in cash...
But EFF and Freedom of Press also use Paypal and they have a nice interface for monitoring recurring contributions.
Thousands of volunteers provide the network capacity that makes the daemon useful.
[edit] Have you folks looked at https://gratipay.com/search as another source of crowdfunding for developers? I am not sure which one is more effective for general funding.
TL;DR (2014):
Feb: Understaffed Tor minimized security warning. "Activity in the past has looked suspicious at the time, but ultimately did stuff that helped advance our art."
May: CMU researchers announce breaking Tor, ignoring potential ethical violations. Blackhat talk cancelled; CMU & FBI begin 'not the droids you're looking for' responses.
Jul: Emergency fix to Tor to block CMU vulnerability. CMU researchers stop corresponding with Tor project.
Nov: FBI crackdown
It's disingenuous to say that Tor reacted only after being deanonymized personally:
1. It was well known that Nick Mathewson worked for Tor long before this attack.
2. Tor added code that allowed them to detect the attack before they knew their IPs were deanonymized: that's the only way they found out their IPs were deanonymized.