How secure is Tor network?
For example, I downloaded Tor network and using it for illegal activities. Can my govt track me? Can US govt track me? I know it encrypts something but if I remember correct, FBI was able to find some Tor users before.
Note: illegal activities was for example. I'm not going to do anything illegal. I'm just planning to serve my instance with a onion address.
Short answer: In theory, pretty much anything you're doing on the modern internet can be traced back to you. It's just a question of how much effort, sophistication, and time someone's willing to invest in the tracing. Tor is a pretty high bar for them to clear, so it'll protect you against a pretty high bar of attempting to track you down -- but that's only true as long as you're not doing anything careless to compromise your own security, and it's pretty easy to do something careless (especially in the long term).
This DEFCON talk goes into a lot of the nitty-gritty details and reality. The speaker sold drugs on the dark web for quite a while, but eventually got caught and went to federal prison, so he knows both sides of it.
Here is an alternative Piped link(s): https://piped.video/watch?v=NGiUhjuB22Y
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I'm open-source, check me out at GitHub.
Thanks for the video, I'll check it out.
Most tor users got caught because of bad OPSEC, not because of the tor network itselfā¦
Bad opsec and hubris/idiocy.
Maybe, parallel construction confuses the quality of ToR a bit. If I was a APT and compromised ToR I wouldn't want anyone to know, so i would use parallel construction to always have a non-ToR reason for a take down.
Don't do illegal activities.
What signal fiasco?
You should read the Tor foundation documentation before trusting your freedom to it.
You can be tracked on Tor, but the question is by who, and when. If you login to gmail over tor then google knows your using tor. If you access tor from your home computer then your isp knows your using tor.
If your threat model includes Advanced Persistent Threats at the nation state level, then they can do Cybill attacks and control enough nodes that they could track you.
"illegal activities" doesn't always mean buying crack cocaine, or whatever. depending on where you live it can mean:
accessing wikipedia, forming communities, performing union activities...
in other words, the ruling class of your country decides something being threatening their power, and that becomes an illegal activity.
of course everyone can be tracked. also everyone is not julian assange, so i'm not so worried about using tor for "illegal activities".
What I meant with Signal fiasco is, they didnāt published server code for a year and the fact that theyāre a US establishment. Itās not looking that bad but Iām not going to trust them anymore.
Signal fiasco?
[This comment has been deleted by an automated system]
I guess the phone number leak, I wouldn't really call it a fiasco though
That was also a hack on Twilio. Signal itself wasn't compromised in any way if I am not wrong.
Please don't do anything illegal...
Nice try
Sheesh, almost got you š
As long as you stay far far away from Javascript, you should be fine.
smart move to add that note, they nearly send out a swat team
On a serious note, if I'm not mistaken, most cases of Tor users identity being uncovered is via information the user either unintentionally leaving information public, or privately told another user, which was made public due to a betrayal or a security breach.
In most other cases involve security flaws in Tor clients not the network, again if I'm not mistaken.
@iso depends if you click on this click: https://dowloadtor.melroy.org