The feds pay for 60 percent of Tor’s development. Can users trust it?

Re:The feds pay for 60 percent of Tor’s development. Can use... by shawnz on Friday September 06, 2013 @09:57PM (#6343631)

> It's highly possible that there are federal government agencies with knowledge of encryption and security beyond the current state of the art in academia. There could be deliberate vulnerabilities that even the most highly regarded researchers/academics in the field could not detect.

That's true, but Tor uses encryption that is common in many other products. Even if it were a privately owned product, it probably would have been implemented in a very similar way.

> Even if you trust the source, the source can be compromised elsewhere in the toolchain (the compiler could turn safe code into malicious code). Unless you trust every element of your toolchain, you trust nothing (from a mathematical sense -- of course it's much more complicated, and thus less likely, to compromise Tor through its own source code rather than gcc's source code).

OP is not talking about whether or not perfect security is possible. They are talking about the possibility of Tor specifically being backdoored, since it originated within and is funded by the U.S. government.

[ Parent | on HN ]

Re:The feds pay for 60 percent of Tor’s development. Can use... by autoexec on Friday September 06, 2013 @10:52PM (#6343742)

I doubt tor is backdoored, but it has it's own security issues. I wouldn't doubt for a second that three letter agencies are running a huge amount of nodes on the tor network and doing everything they can to correlate traffic and associate connections to individuals. At the end of the day, you can't rely on tor alone to keep you safe or anonymous on the internet.

[ Parent | on HN ]