The security community lives on papers that analyze attacks on security tools. Although these are called “attack papers” they are usually done by people who are trying to help and refine the object of the research.
When an attack paper is published, documenting an attack on the Tor network, it’s often with our knowledge. The authors consult with us for inside info. But invariably, someone on slashdot or other blogs will skim the paper and say “OMG, Tor is broken!”
Using Tor is relatively safe. If there were a published way to attack the network that we thought made it less safe to use Tor, we’d tell you first — since, so far, the authors of every genuinely new vulnerability have told us before their work hit the web. We announce security patches and other issues on or-announce@freehaven.net.
The UColorado/Boulder technical paper is an example of the evolving research in anonymity. Refining well-known attacks from several years ago, the researchers better documented what an attack on the network might look and behave like. They combined a bandwidth overstatement attack with a correlation attack.
They consulted with us on the project. We are aware of these kinds of potential attacks — but such a bandwidth overstatement attack, to be successful, would leave fingerprints all over the Tor directories. We have never seen such an attack “in the wild,” and we think it no more likely that this paper would make such an attack easier or more likely than it was a few years ago when another version of it was documented.
The authors of the new paper have published a FAQ addressing how users should think about their research — they expressed their surprise and regrets at the uproar.
It says in part:
Q0. Most importantly, should we stop using Tor?
A0. ABSOLUTELY NOT! Despite our findings, Tor is the most secure and usable privacy enhancing system available. We believe that the system is safe for end-users, however, the system is experimental and the developers make no guarantees about the degree of privacy that it can provide. Let use re-iterate: Concerned users should NOT stop using Tor.
No internet security is 100%. Tor is not perfect — we’re constantly refining it, in a context of a hugely supportive community of researchers. But we believe we are still the best low-latency (i.e. allowing web surfing, not just transferring a file every few hours) anonymity/privacy one can have online without crossing a line of civility. Your only better option is to buy into a botnet, steal an identity, or participate in some other crime with a victim.
We are currently seeking funding that should help us close these vulnerabilities in Tor (and if you would like to donate or fund Tor development, please contact me!). We have plans to close the bandwidth overstatement vulnerability in the coming months. In the meantime, we watch for attacks on the network, and work to be transparent in our operations.
We appreciate that people care about Tor. If in the future you are worried about some issue in Tor, please feel free to contact us directly. If you read speculation about Tor, please encourage the bloggers to check with us — we’re very blogger friendly, and part of our purpose is to protect bloggers where blogging isn’t safe.
Imagine this scenario — a very small risk documented in a technical paper gets sensationalized in the blogosphere. Some number of dissidents and bloggers in places such as China abandon Tor. As a result, they might be arrested, jailed, or disappeared.
Blogstorms can have real world consequences. Please ponder before you write, critically examine what you read, and ask us for updates.
That was an excellent article. You made some really good points and I appreciate for your insight! Keep it up!
Cool information it is without doubt. My girlfriend has been awaiting for this content.
That was a great post. You made some exceptional points and I am grateful for for your information! Keep it up!
I thoroughly enjoyed reading your post! I found it not only informative but enjoyable also! I am mainly involed with Austin plumber but I really learned a lot from this. Keep up the good work!
Although I agree with some of the points which the article makes, I do understand the reasoning of some of the comments posted. Great discussion. – nicholas
That was an excellent post. You made some exceptional points and I am grateful for for your information! Thanks Again
Outstanding information it is definitely. My boss has been awaiting for this content.
This is the reverse Nobody Knows You're a Dog » The rumors of our demise diary for anyone who wants to essay out out about this subject. You request so some its nearly exhausting to converse with you (not that I real would want…HaHa). You definitely put a new extend on a substance thats been scrivened roughly for age. Metropolis nonsense, just zealous!
The subsequent time I learn a weblog, I hope that it doesnt disappoint me as a lot as this one. I mean, I do know it was my option to learn, however I actually thought youd have one thing interesting to say. All I hear is a bunch of whining about one thing that you could possibly repair when you werent too busy looking for attention.
Thank you for each of your efforts on this website. My mum take interest in setting aside time for internet research and it is easy to understand why. My spouse and i know all concerning the dynamic medium you render efficient tactics by means of the web site and as well encourage contribution from other individuals on the situation plus my child is without a doubt understanding a lot. Have fun with the remaining portion of the year. You’re the one performing a fantastic job.
Nice post. I study something more difficult on completely different blogs everyday. It’ll at all times be stimulating to learn content material from different writers and practice a bit something from their store. I’d want to make use of some with the content on my weblog whether you don’t mind. Natually I’ll provide you with a hyperlink on your web blog. Thanks for sharing.
I’m impressed, I have to say. Actually hardly ever do I encounter a weblog that’s both educative and entertaining, and let me inform you, you may have hit the nail on the head. Your idea is outstanding; the problem is something that not enough persons are talking intelligently about. I’m very completely happy that I stumbled throughout this in my search for one thing referring to this.
Still an interesting post..
An fascinating discussion is value comment. I think that you need to write more on this matter, it won’t be a taboo topic however typically persons are not sufficient to speak on such topics. To the next. Cheers
I really enjoyed reading your post! This was not only informative but nice to read also! I am primarily involed with psle tuition singapore but I really got a lot from this. Take care!
Good information you have posting, thank you for the sharing
hp tonerdolumu,toner dolum,teknik servis
I am typically to running a blog and i really admire your content. The article has actually peaks my interest. I am going to bookmark your site and maintain checking for brand spanking new information.
So please don’t ask me how
I ended up at my wits end
And breaking down
Pages torn from books we never read,
Cause we’re plugged into this grid.
Don’t pull this plug right now,
Or then we’d really have to live.
We came in search of answers!
We left empty handed again!
Shots fired into the sky…
Are now returning!
Where the fuck will you hide?
When we built these dreams on sand
How they all slipped through our hands
This might be our only chance
Let’s take this one day at a time
I’ll hold your hand if you hold mine
The time that we kill keeps us alive.
I really enjoyed reading your post! This was not only informative but nice to read as well! I am mainly involed with Pherazone review but I really got a lot from this. Keep up the good work!
That’s good explanation, thanks for the lesson very much.
I want to get across my admiration for your generosity giving support to visitors who must have help on this particular question. Your personal commitment to getting the solution all around has been astonishingly insightful and has specifically helped those much like me to realize their pursuits. Your personal warm and helpful tips and hints indicates so much to me and additionally to my office workers. With thanks; from all of us.
Hurrah, that’s what I was looking for, what a stuff! present here at this website, thanks admin of this website.
I thoroughly enjoyed reading your article! I found it not only informational but enjoyable also! I am mainly involed with buy pinterest likes but I really picked up a lot from this. Keep up the good work!
That was a great blog. You made some really good points and I am thankful for your information! Keep it up!
Super share it is definitely. My father has been seeking for this content.
They misplaced this book under other categories.Neither of the men spoke.Jean is a blue-eyed girl.Most of the earth’s surface is covered by water.I went there three days ago.Li Bai is one of the greatest poets that have ever lived in China.Li Bai is one of the greatest poets that have ever lived in China.Don’t let this get you down.Take care!Close the door after you£¬please.
I must voice my admiration for your kind-heartedness supporting persons who actually need help on this important topic. Your real commitment to getting the message all over appears to be astonishingly beneficial and has regularly encouraged associates much like me to attain their goals. Your new helpful hints and tips indicates this much to me and even more to my office colleagues. Many thanks; from each one of us.
Very good post and very popular innit
Деньги на кликах
Spot on with this write-up, I actually suppose this website needs rather more consideration. I’ll most likely be once more to learn much more, thanks for that info.
I’m writing to make you be aware of of the outstanding discovery our girl gained checking your web site. She figured out several pieces, which include what it is like to possess a great giving mindset to make most people without hassle learn about several hard to do topics. You undoubtedly did more than visitors’ expected results. Thank you for churning out such precious, trusted, revealing and as well as fun guidance on the topic to Mary.
I’m usually to blogging and i actually recognize your content. The article has actually peaks my interest. I am going to bookmark your site and maintain checking for brand spanking new information.
I am often to blogging and i really appreciate your content. The article has really peaks my interest. I am going to bookmark your site and keep checking for brand spanking new information.
I not to mention my guys ended up taking note of the best helpful hints located on your website and all of a sudden came up with a terrible feeling I never thanked the web site owner for those secrets. All the people had been certainly glad to see them and now have in actuality been taking advantage of them. Thank you for indeed being simply considerate and then for making a decision on variety of impressive areas most people are really desperate to know about. Our own sincere regret for not expressing appreciation to earlier.
hi!,I like your writing very much! share we be in contact more approximately your article on AOL? I need a specialist in this area to unravel my problem. Maybe that is you! Taking a look forward to peer you.
I discovered your weblog site on google and examine a few of your early posts. Continue to keep up the excellent operate. I simply further up your RSS feed to my MSN Information Reader. In search of ahead to studying more from you in a while!…
Can I simply say what a aid to seek out somebody who really is aware of what theyre talking about on the internet. You positively know tips on how to deliver a difficulty to mild and make it important. Extra individuals must learn this and understand this facet of the story. I cant consider youre not more standard because you undoubtedly have the gift.
That was a great article. You made some really good points and I am grateful for for your information! Take care!
Hy, i realy like your blog design,if you think you can helps us with the layout we wil be realy delighfull
A timely reminder about online security. Thank you
Thank you. Security, like backing up, is most often overlooked.
Awesome share it is definitely. I’ve been seeking for this content.
That was just fascinating! I appreciate you putting your thoughts into words.
Great to come back and read more, looking forward to an awesome new year! The demise was short lived, and the story lives on!!
We have had a lot of issues with web security and server problems. What are the best ways when you have wordpress sites and everyone can access the network to put some additional security in place. thanks, any tips would be good.
Your input on this is very valuable. Please, continue elaborating with more posts on this matter.
I still use TOR on a daily basis, just wanted to share this notion with the rest of you 🙂