How secure is Tor network?

For example, I downloaded Tor network and using it for illegal activities. Can my govt track me? Can US govt track me? I know it encrypts something but if I remember correct, FBI was able to find some Tor users before.

Note: illegal activities was for example. I’m not going to do anything illegal. I’m just planning to serve my instance with a onion address.

possiblylinux127,

Please don’t do anything illegal…

melroy,
melroy avatar

@iso depends if you click on this click: https://dowloadtor.melroy.org

Steamymoomilk,

Were the link go? I’m too spooked to click

melroy,
melroy avatar

The Curiosity of the human mind is the weakest link.

iso,

WDYM I just downloaded Tor Browser from there and its working as expected. But interestingly it was Chromium based.

ghjsh8,
@ghjsh8@lemy.lol avatar

Isn’t Tor browser based on Firefox?

Celtic7670,
@Celtic7670@feddit.de avatar

Yes.

Celtic7670,
@Celtic7670@feddit.de avatar

It’s a fake link.

Dsklnsadog,
@Dsklnsadog@lemmy.dbzer0.com avatar

I’m intrigued. What is that link?

melroy,
melroy avatar

The Curiosity of the human mind is the weakest link.

Dsklnsadog,
@Dsklnsadog@lemmy.dbzer0.com avatar

Actually, that’s what makes us better. Even if the price is death of one for knowledge of the whole race

melroy,
melroy avatar

I fully agree with you ;) .. Although a lot of animals are curious as well. But I mean it's one of the weakest links in terms of security. The human is the weakest link.

MinekPo1, (edited )
@MinekPo1@lemmygrad.ml avatar

On a serious note, if I’m not mistaken, most cases of Tor users identity being uncovered is via information the user either unintentionally leaving information public, or privately told another user, which was made public due to a betrayal or a security breach.

In most other cases involve security flaws in Tor clients not the network, again if I’m not mistaken.

LollerCorleone,

Signal fiasco?

QuazarOmega,

I guess the phone number leak, I wouldn’t really call it a fiasco though

iso,

I said “fiasco” because they did not share the backend server repo for a while and did not make any statement about it. Maybe a little overreaction than it should be. But for an app that promises privacy, it’s kinda annoying.

QuazarOmega,

Oh that, yeah that was pretty bad tbh

LollerCorleone,

That was also a hack on Twilio. Signal itself wasn't compromised in any way if I am not wrong.

skullgiver,
@skullgiver@popplesburger.hilciferous.nl avatar

Signal went closed source for ages, just simply stopped publishing their source code. Happened with the server and the client. Pretty shitty thing to do if your whole ad spiel is about how you can trust them because they’re so open and transparent.

Or maybe it was the weird blockchain coin thing they added into Signal, that left a bad taste as well.

hottari,

As long as you stay ^far^ ^far^ away from Javascript, you should be fine.

mo_ztt,
@mo_ztt@lemmy.world avatar

Short answer: In theory, pretty much anything you’re doing on the modern internet can be traced back to you. It’s just a question of how much effort, sophistication, and time someone’s willing to invest in the tracing. Tor is a pretty high bar for them to clear, so it’ll protect you against a pretty high bar of attempting to track you down – but that’s only true as long as you’re not doing anything careless to compromise your own security, and it’s pretty easy to do something careless (especially in the long term).

This DEFCON talk goes into a lot of the nitty-gritty details and reality. The speaker sold drugs on the dark web for quite a while, but eventually got caught and went to federal prison, so he knows both sides of it.

iso,

Thanks for the video, I’ll check it out.

Chivera,

Nice try

iso, (edited )

Sheesh, almost got you 😅

asmodeus,

Most tor users got caught because of bad OPSEC, not because of the tor network itself…

iso,

So we need other security methods besides using Tor? Like what?

asmodeus,

Not using anything Google/Microsoft related would be a good start.

IphtashuFitz,

Followed by no JavaScript, no browser plug-ins, etc.

cooopsspace,

Bad opsec and hubris/idiocy.

Nerd02,
@Nerd02@lemmy.basedcount.com avatar

This post glows so hard I’m going to need a pair of sunglasses.

https://lemmy.basedcount.com/pictrs/image/d929c5d1-12a2-4724-807e-7b43326f0166.jpeg

iso, (edited )

Wait, is the joke about me being CIA? Cause I’m not CIA 100%

Celtic7670,
@Celtic7670@feddit.de avatar

That’s exactly what a fed would say

iso, (edited )

It’s simple. If you ask a cop if he’s a cop, he’s like, obligated to tell you. It’s in the Constitution.

breaking bad reference

IphtashuFitz,

Crooks getting their infallible legal advice from Hollywood screenwriters…

ollie,

smart move to add that note, they nearly send out a swat team

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • random
  • updates
  • drbboard
  • til
  • tech
  • programming
  • bitcoincash
  • testing
  • japanese_idols
  • All magazines