lbthomsen

After discussion on the Tor mailing list a while back, that issue was solved in Cloak (http://reclaim-your-privacy.com and http://github.com/ReclaimYourPrivacy) by using different Tor circuits for each service! The relevant file is here: https://github.com/ReclaimYourPrivacy/cloak-cloak/blob/maste...

Hey, I did include a smiley in the original wiki post.

I had a look at the Invizibox firmware and it is somewhat better than Anonabox. However, and this is important - they are not Open Source. They TOO are only patching a binary firmware delivered by the manufacturer of the router (Gainstrong).

A simple fact is they do not _have_ the source code. They are only patching the firmware the router came with from China when they bought it. They are not even building Tor themselves but relying on an old unsupported version straight from OpenWrt's repository.

That and the semi-randomized SSID have been bugging me all day while I wrote that wiki entry. I simply can't see the logic in or reasoning behind those decisions.

Now, that I am inclined to agree with :) And fact is - using the device as shipped to us is more dangerous than not using it at all. Anybody within WiFi range can basically do whatever they want.

I wrote that analysis and honestly - no - I don't think it's malicious. Incompetent perhaps, but not malicious.