Tor Exit Nodes in Libraries – Pilot

Re:Tor Exit Nodes in Libraries – Pilot by moe on Friday July 31, 2015 @05:19AM (#9980745)

The NSA is very much global and according to the Snowden leaks tapped into a large number of major internet exchanges and sea cables, including the largest internet exchange of the world (Germany, DECIX[1]) as well as the largest exchange in Asia (Hong Kong, HKIX[3]) and South America (Brazil, BRIX[4]) respectively.

From what we know the NSA has global coverage with google-style indexing[1] since at least 2012, possibly earlier.

[1] https://firstlook.org/theintercept/2014/08/25/icreach-nsa-ci...

[2] http://www.ip-watch.org/2015/04/24/largest-internet-exchange...

[3] http://www.scmp.com/news/hong-kong/article/1269773/hong-kong...

[4] http://www.newyorker.com/news/news-desk/what-the-n-s-a-wants...

[5] http://www.theguardian.com/uk/2013/jun/21/gchq-cables-secret...

[6] https://docs.google.com/spreadsheets/d/1x6aYnGmbQKzZGLUkWC4m...

[ Parent | on HN ]

Re:Tor Exit Nodes in Libraries – Pilot by andreyf on Friday July 31, 2015 @10:34PM (#9985645)

Thanks for finding all of those sources. That is indeed a vast network of intercepts, however it's not necessarily "global" in the sense that they monitor all communication. If one could choose their Tor link to include enough paths not likely to be monitored by colluding parties, then one could be more certain they are not facing a "global adversary" in the sense that the Tor site means.

[ Parent | on HN ]

Re:Tor Exit Nodes in Libraries – Pilot by moe on Saturday August 01, 2015 @06:39AM (#9986576)

however it's not necessarily "global" in the sense that they monitor all communication.

It is very much global in the sense that they monitor all communication.

How about actually reading some of the sources that you were just provided with?

[ Parent | on HN ]

Re:Tor Exit Nodes in Libraries – Pilot by andreyf on Wednesday August 05, 2015 @10:35PM (#10014236)

Not literally all communication in the global sense that Tor refers to. For a trivial example, the wifi signal between my computer and my router is not monitored.

Your references seem to talk about major exchanges all over the globe. Practically speaking, because a Tor client can choose the routers for the link it creates, it could choose three routers behind a single major exchange that is monitored (e.g. in Asia or South America), and hence remain anonymous, because the connections between those routers are not monitored.

[ Parent | on HN ]

Re:Tor Exit Nodes in Libraries – Pilot by moe on Thursday August 06, 2015 @09:24AM (#10016191)

because the connections between those routers are not monitored

A correlation attack[1] doesn't care about the intermediate routers. It only requires packet dumps from the entry and the exit node. Both of which, with very high probability, route through networks that are monitored by the NSA.

[1] https://blog.torproject.org/blog/traffic-correlation-using-n...

[ Parent | on HN ]

Re:Tor Exit Nodes in Libraries – Pilot by andreyf on Saturday August 08, 2015 @12:09AM (#10026291)

Good point. I wonder how useful that is in practice with the amount of traffic going through the Tor network. It seems to me that the more people use it, the harder it would be to get accurate correlations. That said, I wouldn't be surprised if some clever math can do so more accurately than has been published.

[ Parent | on HN ]