News for hackers. Stuff that matters.

A comment on Hackers breach FSB contractor, expose Tor deanonymization project. Parent comment

Re:Hackers breach FSB contractor, expose Tor deanonymization... by bin0 on Saturday July 20, 2019 @11:23AM (#20486279)
He really did that? Jeez, you're right. Still, such attacks have doubtless been used before. Even if they haven't broken the core protocol, I'd assume they've got a few zero-days sitting around.
[ Parent | on HN ]
Re:Hackers breach FSB contractor, expose Tor deanonymization... by stordoff on Saturday July 20, 2019 @02:40PM (#20487534)
Freedom Hosting is a good example of using alternative attacks to sidestep Tor:

> News reports linked a Firefox browser vulnerability to a United States Federal Bureau of Investigation (FBI) operation targeting Freedom Hosting's owner, Eric Eoin Marques. In August 2013, it was discovered that the Firefox browsers in many older versions of the Tor Browser Bundle were vulnerable to a JavaScript attack, as NoScript was not enabled by default. This attack was being exploited to send users' MAC and IP addresses and Windows computer names to the attackers. The FBI acknowledged they were responsible for the attack in a September 12, 2013 court filing in Dublin

https://en.wikipedia.org/wiki/Freedom_Hosting

[ Parent | on HN ]
Re:Hackers breach FSB contractor, expose Tor deanonymization... by TazeTSchnitzel on Saturday July 20, 2019 @11:25AM (#20486294)
We do know that the US government used a Flash applet to deanonymise a lot of Tor Browser users. It was revealed in some lawsuit I think.
[ Parent | on HN ]
Re:Hackers breach FSB contractor, expose Tor deanonymization... by somethingnot on Saturday July 20, 2019 @11:41AM (#20486399)
He did a lot of stupid stuff. Like logging into SilkRoad from a public library. FBI agents were at the next table.
[ Parent | on HN ]
Re:Hackers breach FSB contractor, expose Tor deanonymization... by dontbenebby on Saturday July 20, 2019 @12:27PM (#20486686)
He logged in in public a lot. They were able to correlate him opening laptop/joining wifi with their suspect account signing into Silk Road.
[ Parent | on HN ]