News for hackers. Stuff that matters.

A comment on The Tor Project: Building the Next Generation of Onion Services. Parent comment

Re:The Tor Project: Building the Next Generation of Onion Se... by zatkin on Tuesday May 24, 2016 @11:35AM (#11762401)
Maybe the NSA was unable to compromise the core infrastructure, but the FBI was able to compromise enough to hack into a web forum and log the location data for its users, followed by subsequently impersonating the administration of said forum for two weeks or so, then arresting nearly 1,000 individuals.
[ Parent | on HN ]
Re:The Tor Project: Building the Next Generation of Onion Se... by duozerk on Tuesday May 24, 2016 @11:45AM (#11762490)
They did that by attacking the forum software/the server itself, not tor and the underlying transport layer in general.

It's another layer entirely and does not give information about their capabilities in attacking tor itself (except maybe through the fact that if they had to do that, then yeah, tor is probably still relatively secure if used properly).

[ Parent | on HN ]
Re:The Tor Project: Building the Next Generation of Onion Se... by y4mi on Tuesday May 24, 2016 @12:06PM (#11762687)
can TOR be considered to be on the transport layer though? i thought it worked with TCP, so it would need to be at least OSI level 5 iirc?
[ Parent | on HN ]
Re:The Tor Project: Building the Next Generation of Onion Se... by duozerk on Tuesday May 24, 2016 @12:25PM (#11762874)
> so it would need to be at least OSI level 5 iirc

You're right; actually tor reside in the application layer I think (above TLS).

Although conceptually speaking it is itself a transport layer I guess.

[ Parent | on HN ]
Re:The Tor Project: Building the Next Generation of Onion Se... by lrem on Tuesday May 24, 2016 @12:23PM (#11762858)
OSI level is cute, especially once you start to interpret ip over https ;)
[ Parent | on HN ]
Re:The Tor Project: Building the Next Generation of Onion Se... by brobinson on Tuesday May 24, 2016 @08:14PM (#11766683)
Tor is a layer 4 overlay network.

Layer 5 would be HTTP, layer 6 would be the content (JPEG, MP4, etc.), and layer 7 would be the application serving or sending the HTTP requests/content.

[ Parent | on HN ]