News for hackers. Stuff that matters.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by tootahe45 on Sunday May 09, 2021 @09:09AM (#27095660)
Stopped taking tor seriously when i read one of these attackers controlled something like 30% of exit nodes around 1-2 years ago. Just makes you wonder whether the rest are govt hosted given there are no incentives for anybody to host a node. Another reason i don't trust TOR is that on the TOR subreddit they always tell you not to use a VPN before TOR, which just seems very suspect given there is only upside to doing this (VPN only sees what your ISP would've seen unless the vpn client is malware).
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by JohnJamesRambo on Sunday May 09, 2021 @09:26AM (#27095741)
>there are no incentives for anybody to host a node.

Sounds like you kids need an anonymous decentralized cryptocurrency powering your tor nodes with rewards for doing so. But everyone here hates crypto so I’ll just be over here sipping my Monero tea.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by enumjorge on Sunday May 09, 2021 @09:53AM (#27095886)
I don’t think people here dislike crypto for its stated goals, but because current implementations don’t live up to those goals and have some serious defects. The hype doesn’t match the reality, which makes crypto feel more like a speculative market than a solution to a problem.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by Siira on Sunday May 09, 2021 @10:37AM (#27096237)
Things take time. Which industry matured that quickly? Anyhow, stuff like Monero are actively suppressed by regulation and central exchanges. That's a political problem.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by trompetenaccoun on Sunday May 09, 2021 @11:42AM (#27096902)
Monero is just a digital currency anyway, similar to Bitcoin if Bitcoin had cheap transactions. You can hardly run anything on the network. Something like Ethereum might be an option once it scales properly and when transaction costs come down. I do agree there needs to be a financial incentive to run nodes. A blockchain which does not discriminate in terms of applications running on it could be very valuable in the future. Privacy is important, not just from a civil rights point of view but for businesses too. There's a reason corporations care about IT security and encryption.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by Dunedan on Sunday May 09, 2021 @10:14AM (#27096050)
There was a pretty nice project a few years ago, awarding Bitcoin to Tor node operators called Oniontip [1]. All Tor operators had to do was to add a Bitcoin address to their Tor contact info. Donors would transfer Bitcoin to a Oniontip-operated Bitcoin address and Oniontip would regularly pay out the Tor operators proportional to the bandwidth they provided to Tor.

That did work remarkably well, but unfortunately the author lost interest at some point and took the whole project down.

[1]: https://github.com/DonnchaC/oniontip

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by mumblemumble on Sunday May 09, 2021 @12:42PM (#27097409)
OK, I'm curious, how would this work out in practice?

The first reservation that comes to mind for me is concerns about crypto ledgers being more pseudonymous than anonymous. If I start using a cryptocurrency to tip exit node operators, that creates an immutable, publicly visible paper trail linking my presence on TOR back to me. Not exactly the kind of thing I'd be eager to sign up for if I'm trying to hide my tracks.

It also moves things toward a situation where digital privacy is reserved for people who can afford to pay for it, which strikes me as running directly counter to the principles the TOR project is supposed to be upholding.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by nerdponx on Sunday May 09, 2021 @10:30AM (#27096173)
How would you "prove" that someone is hosting a non-malicious node? I assume it can be done (cf gridcoin, filecoin, namecoin).
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by chayleaf on Sunday May 09, 2021 @11:21AM (#27096690)
It needs to be verifiable to be protected from spoofing, and encrypted to be protected from listening. You can't verify arbitrary network traffic because servers aren't stateless, but you can encrypt some traffic (https). Sadly, the encrypted traffic still has some metadata, such as server ip, sometimes hostname, request size.

Either way, it can't be protected in the way filecoin/gridcoin are protected.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by remram on Sunday May 09, 2021 @11:47AM (#27096944)
I think the idea was to reward all exit nodes, to provide an incentive for doing so that doesn't involve malicious behavior. Hopefully that would drown the malicious nodes in a sea of non-malicious operators who are here for the cryptocurrency rewards.

Of course a way to prove you are not malicious would be great but I don't see how you can prove that using technology.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by fragileone on Sunday May 09, 2021 @11:44AM (#27096920)
I believe Orchid [1] was one of the first decentralised VPNs to have multi-hop, but I'm not sure if it uses onion routing.

[1] https://www.orchid.com/

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by meowface on Sunday May 09, 2021 @11:01AM (#27096476)
I think HN is generally positive towards Monero.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by disposekinetics on Sunday May 09, 2021 @11:06AM (#27096546)
Wouldn't the possession/spending of that currency strongly imply I run a node? I think it might be self-defeating.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by remram on Sunday May 09, 2021 @11:48AM (#27096958)
Can you host an exit node anonymously? I would assume it's not much better than the privacy offered by Bitcoin and most cryptocurrencies.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by batch12 on Sunday May 09, 2021 @10:15AM (#27096057)
I think their point about VPN is that a third party provider then could be compelled to disclose information about you. Since all your traffic routed through a single provider before hitting the remote proxy, there is now the potential for a single point of collection. When using Tor only, traffic leaving your computer is encrypted before hitting the first node which mitigates this threat. If the use of Tor is illegal for you, a VPN makes sense to hide its use-- but like you said, it is only hidden from the ISP. The VPN provider can still see that you are using it. In practice, how Tor is used should depend on the threat a person is trying to defend against.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by jl2718 on Sunday May 09, 2021 @11:04AM (#27096518)
Nonsense or terrible design. The VPN shouldn’t be able to read anything sent to a tor node. There are easy ways to detect a key exchange intercept with a trusted certificate authority, and probably also with no trusted authority.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by batch12 on Sunday May 09, 2021 @11:46AM (#27096933)
Maybe the thought is that there is no additional security is gained by using the VPN in this use case unless your threat model includes your ISP knowing you are using Tor. You're moving the trusted partner from your ISP to the VPN provider. Again, it comes down to an assessment of risk based on your threats.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by im3w1l on Sunday May 09, 2021 @10:49AM (#27096340)
> third party provider then could be compelled to disclose information about you.

What data exactly are you worried they would disclose? Everything they see would be encrypted, no?

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by batch12 on Sunday May 09, 2021 @11:38AM (#27096864)
I am not worried. I was simply explaining the argument as I understood it.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by zionic on Sunday May 09, 2021 @10:50AM (#27096346)
VPN hardens against your local ISP knowing when you are and are not using Tor, which is important meta data and has been used to identify people in the past.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by batch12 on Sunday May 09, 2021 @11:51AM (#27096973)
True, but the ISP knows you are using VPN and the VPN provider knows you are using Tor. Thats why I made the argument that the stategy of defense depends on the use case.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by vbezhenar on Sunday May 09, 2021 @09:52AM (#27095875)
I can't even access TOR without VPN, because it's blocked in my country. My government makes sure our citizens use the best security practices to access the Internet. Very nice.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by throwitaway12 on Sunday May 09, 2021 @10:02AM (#27095968)
You are completely correct about the nodes being run for all sorts of nefarious reasons. Although, there are a small number of nodes rub by enthusiastic individuals but it's rare.

Reddit has tons of actors spreading disinfo especially about VPN's never trust the info from there without serious vetting.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by worldofmatthew on Sunday May 09, 2021 @10:07AM (#27096005)
No, many tor nodes are run for good purposes. in fact, many of the largest networks are non-profits dedicated to running the nodes.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by worldofmatthew on Sunday May 09, 2021 @10:05AM (#27095993)
I think it is mostly to avoid people using the same VPN across mobile and desktop and having both having a common end-point.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by tyingq on Sunday May 09, 2021 @09:13AM (#27095682)
"there are no incentives to host a node."

Agreed. There are even pretty strong disincentives from a legal standpoint.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by readflaggedcomm on Sunday May 09, 2021 @09:32AM (#27095767)
The Tor project's published a FAQ on it, in fact: https://community.torproject.org/relay/community-resources/e... and the only bright spot is the claim that section 230 will protect exit relays, though political winds seem set against that.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by LatteLazy on Sunday May 09, 2021 @10:21AM (#27096098)
Forgive my ignorance but why does it matter who controls exit nodes? Unless you identify yourself on the clearnet an exit node operator can't identify you can they?

Like you, I imagine plenty of governments run exit nodes just to see what's happening and keep the system working for their own uses.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by DSingularity on Sunday May 09, 2021 @11:14AM (#27096622)
If they control the relay and the exit mode then they can force http and mount MITM attacks on subsequent traffic of the user didn’t notice. This allows them to replace the destination address with their address and the user will be robbed of his cryptocurrency.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by swiley on Sunday May 09, 2021 @10:50AM (#27096347)
Yeah you really shouldn't generally be using TOR to browse the clear net if you're worried about attacks from a national government.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by jazu on Sunday May 09, 2021 @09:54AM (#27095893)
I hosted a node which moved a hefty amount of traffic. Tor and the EFF sent me several T-shirts even. Then Tor decided they would label themselves a “human rights project” and started to go full political. I shut down my node forever.
Re:Thousands of Tor exit nodes attacked cryptocurrency users... by cyphar on Sunday May 09, 2021 @10:03AM (#27095981)
There are only a handful of things I can think of that are more political than creating software which allows people to access the internet freely and anonymously, in many cases against the wishes of their government.

(Also the EFF is literally a political organisation and has described itself as a civil rights organisation since its formation in 1990.)

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by mumblemumble on Sunday May 09, 2021 @10:12AM (#27096038)
It's kind of interesting to see an apparent expression of pleasure at receiving a T-shirt from the Electronic Frontier Foundation, followed immediately by an expression of disdain about political missions.

I'm pretty sure that, if you asked a random EFF board member, they would tell you that digital rights are largely just the application of human rights principles to the digital domain.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by gruez on Sunday May 09, 2021 @10:19AM (#27096089)
>Then Tor decided they would label themselves a “human rights project” and started to go full political

Why is this bad? Branding yourself as a human rights project garners way more sympathy than having the implied branding of "we help cybercriminals cover their tracks". In an age where encryption and privacy is under constant attack, having the public be on your side is very important.

Re:Thousands of Tor exit nodes attacked cryptocurrency users... by capableweb on Sunday May 09, 2021 @09:56AM (#27095915)
On the opposite side, I didn't start hosting a couple of tor exit- and normal nodes until Tor labelled themselves a "human rights project".