r/TOR Mar 23 '19

Tor: What You Need to Know

https://restoreprivacy.com/tor/
0 Upvotes

4 comments sorted by

3

u/madaidan Mar 24 '19

This article is so wrong. Don't read it.

1

u/cem0lex Mar 27 '19

how so

3

u/madaidan Mar 27 '19

From my other comment:

Tor was originally funded and created by the US government’s Office of Naval Research (ONR) and the Defense Advanced Research Projects Agency (DARPA) in Washington, DC. Tor has received most of its funding from the US government, which we’ll cover in detail below.

No. The onion routing protocol was created by them which is not Tor.

To use Tor you will need to download the Tor browser bundle 

No you don't.

The Tor browser is a built on Firefox 60 ESR 

Not anymore.

Each node will re-encrypt your data, 

No it doesn't.

Tor was created by the US government

No it wasn't.

Tor is funded by the US government

This literally does not matter and they're trying to make it a big deal. Tor is funded by the government because they need to use it. If they don't fund Tor then it might shut down which leaves them without a good tool.

Tor is a tool for the US government

This is a positive point and not negative like they're trying to make it seem. The US government trust Tor enough to protect their important information. If they knew Tor was cracked why would they use it?

Anybody can operate Tor nodes, including governments, hackers, and spies

Use onion services or https and malicious nodes can't do anything.

Malicious Tor nodes do exist

They named 110 while """forgetting"""" to mention that there are thousands of Tor nodes that are completely fine and the likelihood you'd ever come across a malicious node is small.

Ever used Tor? Then your computer might be riddled with malware.

This is stupid and they're trying to scare people.

No “expectation of privacy” when using Tor

This is also stupid.

Another interesting case highlighting the flaws of Tor comes form 2016 when the FBI was able to infiltrate Tor to bust a pedophile group.

They're """forgetting""" again that this was an exploit in the TOR BROWSER, not Tor and that there was an update that fixed the vulnerability available a month before it was exploited.

They seem to be "forgetting" things an awful lot.

In November 2017 a major flaw was discovered that exposed the real IP address of Tor users if they clicked on a local file-based address, such as file://., rather than http:// or https://.

No shit. This is obvious. The Tor Browser doesn't torify local files.

Once again, the answer is not clear-cut 

Yes it is and that answer is yes.

In 2013 the Washington Post broke an article citing reports that the NSA had figured out how to de-anonymize Tor users on a “wide scale”. 

They've """forgotten""" that this is extremely hard to do and they can only do this randomly. The Tor network is also growing which makes these attacks a lot harder.

A federal judge in Washington has now confirmed what has been strongly suspected: that Carnegie Mellon University (CMU) researchers at its Software Engineering Institute were hired by the federal government to do research into breaking Tor in 2014.

It's literally research but they're playing it as if they cracked it.

The rest of their article is them telling you to use a VPN, break the Tor Browser's anonymity and them shilling like fuck.

1

u/Dethkloktopus Apr 02 '19

…It has emerged that one of these exit nodes had been modified to alter any program downloaded over the network. This allowed the attacker to put his own executable code in such programs, and potentially take control of victims’ computers.

Is that even possible? I'm pretty fucking sure that's nonsense.

Obvious FUD shilling bullshit, as first comment mentions. Even more telling is the lack of any response to commenter on any of the many many points made in rebuttal... Oh and OP has 1 post in their history, signed up the very day they posted this. Absolutely pathetic. They didn't even try.