Hacker News new | ask | show | jobs
by victork2 5073 days ago
Not entirely true, see here:

http://en.wikipedia.org/wiki/Tor_%28anonymity_network%29#Wea...

"security consultant, revealed that he had intercepted usernames and passwords for a large number of email accounts by operating and monitoring Tor exit nodes.[27] As Tor does not, and by design cannot, encrypt the traffic between an exit node and the target server, any exit node is in a position to capture any traffic passing through it which does not use end-to-end encryption such as TLS."

It's strongly suspected that China used that method to arrest some opponents of the regime that were talking with TOR. I don't know if Australia has the same level of organization and can drop into communications like that though.

For this story, it really looks that they just used other factors than TOR to find out this guy.

edit: apparently Silk Road is 100% TOR, so it does not work in that case! Mea culpa

3 comments

Exit nodes are only relevant if you're communicating with servers outside the TOR network. Silk Road runs as a Tor hidden service[1], which means you never go through an exit node, it's TORified (and therefore encrypted) end-to-end.

[1]: http://en.wikipedia.org/wiki/Tor_(anonymity_network)#Hidden_...

Silk Road is only available via TOR, so there is no exit node involved.
One other possibility is to hack the computers running Silk Road itself. It's a rather high value target, so I'd be surprised if they didn't try. They could also order drugs from it in order to find out how they were being packaged and alert customs to any new techniques. In fact, there are quite a lot of things they could do, none of which require compromising TOR or Bitcoin.
Thanks for the link, this is very interesting.

Although by transmitting any personal information (email address, etc) through a supposedly anonymous network you kind of limit the benefit of said network.