Fun

‘You Are Not Anonymous on Tor’ – Study Shows Privacy Network Offers Superficial Anonymity

News Feed - 2020-09-17 01:09:57

"You Are Not Anonymous on Tor" - Study Shows Privacy Network Offers Superficial Anonymity


Privacy advocates are growing leery of the Tor network these days, as recently published research has shown a great number of network’s exit relays are compromised. Furthermore, on September 15, the Hacker Factor Blog published a new Tor report that shows IP addresses being uncovered. The paper called “Tor 0-day” says that it is an open secret among the internet service community: “You are not anonymous on Tor.”


For years now, a great number of digital currency proponents have utilized Tor and virtual private networks (VPNs) to stay anonymous while sending bitcoin transactions. The Tor Project was released 17 years ago in 2002, and it has always claimed to obfuscate internet traffic for the end-user.


Essentially, the software written in C and Python leverages a volunteer overlay network consisting of thousands of different relayers. The very basics of this network are meant to conceal a user’s activity on the internet and allow for unmonitored confidential communications.


However, since Covid-19 started and during the months that followed a number of individuals have exposed a few of Tor’s weaknesses. One Tor vulnerability exposed in August is the large-scale use of malicious relays.


A paper written by the researcher dubbed “Nusenu” says 23% of Tor’s current exit capacity is currently compromised. Nusenu also warned of this issue months ago in December 2019 and his research fell on deaf ears. Following Nusenu’s critique, another scathing report called “Tor 0-day” details that IP addresses can be detected when they connect directly to Tor or leverage a bridge.




The paper “Tor 0day” stresses that it is pretty much an “open secret” between those who know, that users “are not anonymous on Tor.” The research is part one of a new series and a follow up will publish data that describes “a lot of vulnerabilities for Tor.” The hacker describes in part one how to “detect people as they connect to the Tor network (both directly and through bridges)” and why the attacks are defined as “zero-day attacks.”


Further, the blog post shows the reader how to identify the real network address of Tor users by tracking Tor bridge users and uncovering all the bridges. The study shows that anyone leveraging the Tor network should be very leery of these types of zero-day attacks and what’s worse is “none of the exploits in [the] blog entry are new or novel,” the researcher stressed. The Hacker Factor Blog author cites a paper from 2012 that identifies an “approach for deanonymizing hidden services” with similar Tor exploits mentioned.


“These exploits represent a fundamental flaw in the current Tor architecture,” part one of the series notes. “People often think that Tor provides network anonymity for users and hidden services. However, Tor really only provides superficial anonymity. Tor does not protect against end-to-end correlation, and owning one guard is enough to provide that correlation for popular hidden services.”


Moreover, the blog post says that the next article in the series will be a brutal critique of the entire Tor network. It doesn’t take too much imagination to understand that in 17 years, entities with an incentive (governments and law enforcement) have likely figured out how to deanonymize Tor users.


“Someone with enough incentive can block Tor connections, uniquely track bridge users, map exit traffic to users, or find hidden service network addresses,” the first “Tor 0-day” paper concludes. “While most of these exploits require special access (e.g., owning some Tor nodes or having service-level access from a major network provider), they are all in the realm of feasible and are all currently being exploited.”


The paper adds:That’s a lot of vulnerabilities for Tor. So what’s left to exploit? How about… the entire Tor network. That will be the next blog entry.


Meanwhile, there is another privacy project in the works called Nym, which aims to offer anonymity online but also claims it will be better than Tor, VPNs, and I2P (Invisible Internet Project).


Nym’s website also says that Tor’s anonymity features can be compromised by entities capable of “monitoring the entire network’s ‘entry’ and ‘exit’ nodes.” In contrast, the Nym project’s ‘lite paper’ details that the Nym network “is a decentralized and tokenized infrastructure providing holistic privacy from the network layer to the application layer.”The Nym project recently initiated a tokenized testnet experiment with over a 100 mixnodes and users will be rewarded in bitcoin.


Nym utilizes a mixnet that aims to protect a user’s network traffic and mixes are rewarded for the mixing process.


“The intensive but useful computation needed to route packets on behalf of other users in a privacy-enhanced manner—rather than mining,” the lite paper explains. Furthermore, Nym is compatible with any blockchain as the “Nym blockchain maintains the state of credentials and the operations of the mixnet.”


The Nym team recently invoked a tokenized testnet experiment and is leveraging bitcoin (BTC) for rewards. The announcement says that a great number of people set up mixnodes and they had to close the testing round because it had gone over 100 mixnodes. Although, individuals can set up a mixnode to be prepared for the next round, the Nym development team’s website details.


What do you think about the Hacker Factor Blog’s scathing review concerning Tor exploits? Let us know what you think about this subject in the comments section below.Privacy Options Underutilized in Cryptocurrency Usage: ReportPRIVACY | Sep 3, 2020Fusing With Whales: Cashfusion Privacy Mixing Expands Allowing 10x Bigger CoinsPRIVACY | Aug 12, 2020Tags in this storyAnonymity, Bitcoin, BTC, deanonymizing, deanonymizing hidden services, Encrypted Communications, exit relays, Hacker Factor Blog, Mixnodes, nusenu, Nym, Nym Network, paper, Privacy, Research, study, superficial anonymity, Tor, Tor architecture, Tor Connections, Tor nodes, Tor Relays, VPN, Web Traffic


Image Credits: Shutterstock, Pixabay, Wiki CommonsPurchase Bitcoin without visiting a cryptocurrency exchange. Buy BTC and BCH here.Disclaimer: This article is for informational purposes only. It is not a direct offer or solicitation of an offer to buy or sell, or a recommendation or endorsement of any products, services, or companies. Bitcoin.com does not provide investment, tax, legal, or accounting advice. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article.Read disclaimerShow comments

News Feed

Crypto exchange user goes AWOL after being sent $650K by mistake: Report
Jesse Coghlan4 hours agoCrypto exchange user goes AWOL after being sent $650K by mistake: ReportOTCPro user Kow Seng Chai reportedly hasn’t responded to emails, calls or appeared in court since the exchange mistakenly
Sydney Sweeney’s X account hacked to promote crypto memecoin
Brayden Lindrea6 hours agoSydney Sweeney’s X account hacked to promote crypto memecoinThe self-proclaimed hacker behind Sydney Sweeney’s X account also claims they were behind similar recent hacks on 50 Cent and Hulk
Rakesh Upadhyay6 hours agoPrice analysis 11/27: SPX, DXY, BTC, ETH, BNB, XRP, SOL, ADA, DOGE, LINKBitcoin is witnessing profit-booking near $38,000, but the correction is likely to be shallow as lower levels are likely t
Bitcoin Volatility Hits Three-Year Low, Sparking Fears of Massive Sell-Off
Bitcoin Volatility Hits Three-Year Low, Sparking Fears of Massive Sell-OffThe cryptocurrency data analytics and research company, Skew has warned that bitcoin could see a massive se
Interest in Bitcoin and Ethereum Slides According to Google Trends Data, NFT Queries Skyrocket
Interest in Bitcoin and Ethereum Slides According to Google Trends Data, NFT Queries Skyrocket While bitcoin, non-fungible token (NFT) assets, ethereum, and cryptocurrencies had an
Most profitable crypto sectors in first half of 2024 revealed
Vince Quill1 hour agoMost profitable crypto sectors in first half of 2024 revealedBlockchain gaming, decentralized finance, and layer-2 platforms lagged behind newly emerging sectors and the current memecoin frenzy.731 T
This Bitcoin Hard Fork Is up Over 100% YTD & Still Looks Very Bullish
While the limelight continues to shine on bitcoin, there are other crypto tokens that might also deserve your attention. One, in particular, is Bitcoin Gold.The bitcoin hard fork cl
Martin Young4 hours agoAltcoins ‘bled’ as Bitcoin gained dominance in Q2: CoinGeckoExchange, DeFi and metaverse tokens were hit hard in the second quarter of 2023 while Bitcoin continued to make gains.4186 Total view
HUMAN Protocol Foundation Announce HMT Now Listed on Probit
HUMAN Protocol Foundation Announce HMT Now Listed on Probit press release PRESS RELEASE. The HUMAN Protocol Foundation is delighted to announce that HMT is now listed on Probit. Pro
Sensorium Galaxy Building the Mecca of Electronic Dance Music in Virtual Reality
Sensorium Galaxy Building the Mecca of Electronic Dance Music in Virtual RealitySensorium strikes a landmark partnership with the creative force behind Ibiza’s hottest nightli
Economics Professor Warns ‘Cryptocurrencies May Contribute to Monetary and Financial Instability’
Economics Professor Warns "Cryptocurrencies May Contribute to Monetary and Financial Instability" Cornell University’s professor of economics and former head of the IMF
Estonia’s Government Still Wants to Implement Stricter Rules for Licensing Crypto Firms
Estonia"s Government Still Wants to Implement Stricter Rules for Licensing Crypto Firms The new administration in Estonia is still planning to pursue an agenda t