CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Tor

 
Post new topic   Reply to topic       All -> FavForums -> General Site [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Mon Mar 31, 2008 11:55 pm    Post subject: Tor
Reply with quote

Sometimes I wonder about folks who think they are anonymous by surfing via a tor exit node. Its my understanding that setting up a tor node is easy to do, and therefore anyone can do it. In so doing, anyone can monitor incoming packets. Is it really anonymous?


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16536

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Tue Apr 01, 2008 3:01 am    Post subject:
Reply with quote

Good point. The TOR node itself could monitor whomever uses it. Certainly the originating IP can be ascertained and with the right software, unencrypted payload could be eavesdropped.

Back to top
View users profile Send private message
mrrockford

News Admin
News Admin
AVPE Host
AVPE Host

Joined: Apr 24, 2004
Posts: 3010

Forums Admin MVP Premium Team F@H

PostPosted: Tue Apr 01, 2008 3:14 am    Post subject:
Reply with quote

Howdy,

TOR nodes are great for whistleblowers, oppressed people trying to get around country blocks of the internet, MITM phishers and illegal downloaders. Other than that I see nothing to be "gained". With OpenSSL, faking a certificate will allow supposedly anonymous secure surfing to be compromised, so that's out.

I see more harm than good being done. Especially when you know that most TOR exit nodes are run in Europe. Makes you think.


_________________
"Anyone who considers protocol unimportant has never dealt with a cat."

L. Long
Back to top
View users profile Send private message Visit posters website
lordpake

Sergeant
Sergeant
Premium Member

Joined: Aug 17, 2005
Posts: 134
Location: Helsinki ~ European Union
Premium

PostPosted: Sun Apr 06, 2008 9:13 am    Post subject:
Reply with quote

mrrockford wrote:
I see more harm than good being done. Especially when you know that most TOR exit nodes are run in Europe. Makes you think.

I don't get this part. Care to explain further?


_________________
Kitten: small homicidal muffin on legs: affects human sensibilities to the point of endowing the most wanton and ruthless acts of destruction with near mythical overtones of cuteness. Not recommended for beginners, get at least two. [Fafnir]
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> General Site All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer