From the limited information The Tor Project has, we believe that one user of the long-retired application Ricochet was fully de-anonymized through a guard discovery attack. This was possible, at the time, because the user was using a version of the software that neither had Vanguards-lite, nor the vanguards addon, which were introduced to protect users from this type of attack. This protection exists in Ricochet-Refresh, a maintained fork of the long-retired project Ricochet, since version 3.0.12 released in June of 2022.#tor #privacy #security #surveillance #censorship #freedom #liberty #ccc
In contrast to the CCC, Chaos Computer Club, who was provided access to the documents related to the case and was able to analyze and validate the reporter's assumptions, we were only provided a vague outline and asked broad clarifying questions that left us with uncertainty of the facts, and questions of our own. While we appreciate the journalist contacting us, this same access was not given to the Tor Project.\
\
Given the potential risk to our users, we decided to go public. We requested that anyone with additional information about the case share it with us. This would allow us to conduct our own analysis and determine the best course of action to protect our users.\
\
To be clear, The Tor Project did not intend to ask for the sources of the story, but sought to understand what evidence existed for a de-anonymization attack to accurately respond to the investigating reporter's questions and assess our disclosure responsibilities. And we continue to have an interest in obtaining more information about how Onion Services users were de-anonymized. If we had access to the same documents as CCC, it would be possible to produce a report with more clarity regarding the actual state of the Tor network and how it affects the great majority of its users.\
\
We need more details about this case. In the absence of facts, it is hard for us to issue any official guidance or responsible disclosures to the Tor community, relay operators, and users.
This blog post is a response to an investigative news report about a large-scale law-enforcement attack that managed to de-anonymize a user of an old version of the long-retired app Ricochet.blog.torproject.org
A different astronomy and space science related image is featured each day, along with a brief explanation.apod.nasa.gov
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.youtube.com
JaneDoeOreo's Landing Page For All Social Media ConnectionsJanedoeoreo
Fast überall in Europa gibt es Angriffe auf die öffentlichen Rundfunksender. Auch wenn die Sender schon heute oft unkritisch sind, werden die Kürzungen weniger Meinungspluralismus zur Folge haben.nd-aktuell.de
Das landeseigene Wohnungsunternehmen Gewobag verweigert einem Mieter, der auf einen Rollstuhl angewiesen ist, über Jahre den Bau einer Rampe – und muss deswegen nach einem wegweisenden Urteil 11 000 Euro zahlen.nd-aktuell.de
Wo docken LNG-Frachter derzeit an? Transportieren sie zu viel Flüssigerdgas nach Deutschland – oder eher zu wenig? Und wie klimaschädlich ist die vermeintliche Brückentechnologie wirklich? Eine Übersicht.nd-aktuell.de
Fernsehkrimis sind ein Trauerspiel und die Chefgehälter bei ARD und ZDF viel zu hoch. Doch die Rundfunkkürzungen sind fatal, weil sie v.a. die Informationsangebote weiter reduzieren, kommentiert Leo Fischer.nd-aktuell.de
