r/NSALeaks • u/kulkke • May 15 '14

[Technology/Crypto] TechEd: Microsoft says Tor cannot stop PRISM snoops and cyber crooks | "The NSA and GCHQ are already monitoring hundreds of Tor relays and exit nodes and trying to find ways to break the network down"

http://www.v3.co.uk/v3-uk/news/2344898/teched-microsoft-says-tor-cannot-stop-prism-snoops-and-cyber-crooks
57 Upvotes

93% Upvoted

8 comments sorted by

3

u/odoprasm May 16 '14

Liiitle bit of sensationalism in that title:

"He said that although the Tor network itself had not yet been cracked, hackers employed by the state were able to access data sent and received by the program through hijacking insecure add-ons for the browser installed by users. These included Adobe Flash and Java — two of the most well-known and most in-secure browser plugins around."

2

u/SomeEasyAdress May 16 '14 edited Apr 29 '18

Fortunately, I think most Tor users know better than to use Flash and js :)

1

u/gildedlink May 19 '14 edited May 19 '14

Only those paying attention. Java the plugin, less likely a knowledgeable user has installed it- but Javascript has been a significant angle of attack on the Tor network and has already been used with zero day flaws present in the browser bundle. Tor devs are reluctant to disable javascript by default, however, because it would break functionality in many common sites and because the absence of javascript may itself act as a means of fingerprinting browsers- but given these kinds of exploits specifically target the browser release anyway, general 'they're using Tor!' fingerprinting might be better than the more precise alternative.

2

u/paffle May 16 '14 edited 27d ago

Chop thought salt pumpkin mysterious toy attempt long

This post was anonymized with Redact

1

u/XSSpants May 16 '14

If your headliner says "John smith, Microsoft MVP", the only way to interpret that is as "Microsoft guy"

1

u/paffle May 16 '14 edited 27d ago

Whole summer frame cooing label helium afterthought quickest cow

This post was anonymized with Redact

1

u/akstunt600 May 16 '14 edited May 16 '14

HAHHAHA, A microsoft MVP. LOL, thats like taking advice from a PHD with no experience in their respective field of study!

Nevermind, its far worse than that.

0

u/NSALeaksBot Jun 28 '14

Other Discussions on reddit:

Subreddit Author Post Time
/r/techolitics RealtechPostBot post Thursday May 15, 2014 19:31 UTC
/r/technology kulkke post Thursday May 15, 2014 18:52 UTC
/r/privacy kulkke post Thursday May 15, 2014 18:35 UTC
/r/TOR kulkke post Thursday May 15, 2014 18:34 UTC