Tor

[Leroy]

I just recently became aware of this technology, and played around with it last night.

Apparently its an additional abstraction layer for browsing the web anonymously.

My buddy works as a security architect for UoC, and says apparently they have discovered a huge flaw in it, and have been reading gov't emails and such...

Keep it clean boys.. go..

 

[iSeize]

OK, THATS A COOL STORY. THANKS FOR TELLING US.

 

[skd_mrk]

Sounds like a continuation of the old rerouting services we used back in high school (was pretty basic at that point really only supported HTTP).

Are the flaws which you're referring to reference people watching the traffic coming off the TOR routers for login/password information? I just did some quick reading and it seems like that is alleviated by using standard encryption inside the TOR network and isn't dramatically different than what you could achieve from classic "sniffing" techniques. This biggest difference between the two is you KNOW to watch the TOR exit points versus having to monitor any number of connections on the chance of getting the info.

 

[Leroy]

hmm, yeah initial research suggests you are correct, it seems to be just another routing algorithm layer above the standard tcp/ip one, however, in this case, the onion routers encrypt their traffic, so you can't tell at midpoint which incoming packet is heading where..

interesting..

 

[adam::davis]

[quote1288208446=iSeize]
OK, THATS A COOL STORY. THANKS FOR TELLING US.
[/quote1288208446]
This, except more sincere. I wish that I knew more about network security, I imagine this would make the topic a bit more interesting.

 

[dead mike]

TOR is ok, i was using it last year at school to connect to bittorrent trackers, it blocks the university/employer from seeing what sites your are looking at, thats about the extent of it.

also evade bans and such lol

 

[Leroy]

[quote1288210165=dead mike]
TOR is ok, i was using it last year at school to connect to bittorrent trackers, it blocks the university/employer from seeing what sites your are looking at, thats about the extent of it.

also evade bans and such lol
[/quote1288210165]

So couldn't you just tunnel to a proxy?

 

[dead mike]

I guess so. pic related

 

[adam::davis]

OVER SIX PROXIES?!?!?!?!