German authorities successfully circumvented #Tor anonymization by conducting statistical timing analysis of packages with monitored Tor nodes for 4 people.https://www.reddit.com/r/privacy/comments/1fjklfs/german_law_enforcement_undermine_tor_anonymiza...
-
German authorities successfully circumvented #Tor anonymization by conducting statistical timing analysis of packages with monitored Tor nodes for 4 people.
https://www.reddit.com/r/privacy/comments/1fjklfs/german_law_enforcement_undermine_tor_anonymization/
#privacy #anonymity #LawEnforcement #BKA #crimeThere's one obvious attack vector here journalists have to know: They ultimately deanonymized their targets by checking the traffic of *all* customers of a certain ISP to those nodes. By putting yet another server inbetween (e.g. VPN) this wouldn't have been possible.
-
⚠️CYBER⚠️katzereplied to Natasha Nox 🇺🇦🇵🇸 last edited by
@Natanox so tor + vpn is actually good? (i remember a few years ago everyone saying that's a terrible idea lmao)
-
Natasha Nox 🇺🇦🇵🇸replied to ⚠️CYBER⚠️katze last edited by
@schrottkatze It's a huge fight in the community… but yes, it very much seems like a confirmation that VPN + Tor is good. However the VPN *has* to be between user and Tor Network for it to work. A misconfiguration here would again completely screw up opsec.