Hacker News new | ask | show | jobs
by wongarsu 1639 days ago
Tor never claimed resiliency against large-scale traffic correlation attacks. Anyone who can look at a sufficient portion of all internet traffic has a good chance of deanonymizing TOR users. The Snowden revelations could lead one to believe that the US is sniffing enough traffic to make this viable, but it's anyone's guess if they collect and synchronize enough data to make deanonymization of TOR users viable.

I2P always looked more promising to me, and more open about its threat model [1] and potential mitigations. But it's not built for browsing the open internet, so it has a somewhat different niche.

1: https://geti2p.net/en/docs/how/threat-model

1 comments

I wish more people ran TOR nodes. I intend to run one when I can.
To be fair it's not like you can run one from your home connection. I mean you could, but it wouldn't be a good idea, unfortunately.
Running an exit relay from home would be a very bad idea, and if your IP frequently changes you might not be picked as guard relay. But I don't see why you couldn't run a middle relay from home, as long as you don't have a traffic cap.
You can run an exit relay from home, at least in the US. There are some ISPs (mostly on the East coast, afaict) that may not help you, but most of them seem to understand how the laws work.

In other countries you may not have such luck.

Running an intermediate/middle node is generally safe. You want to avoid running an exit node.
Running a middle node got my IP banned from some services, even services provided by my ISP.
Indeed, some CDNs like Akamai do not bother distinguishing relays from exit nodes and just ban everything.
Does this apply to snowflake relays?
I've been running a Tor relay from my home for a decade, at least. It's not an exit relay. Never had any issue.