FUD campaign against tor (by @madindian)
Here are some common questions about the safety of Tor answered:
> In 2013 the Washington Post broke an article citing reports that US government agencies had figured out how to de-anonymize Tor users on a โwide scaleโ.
FUD. Disproved even by the NSA themselves.
https://edwardsnowden.com/docs/doc/tor-stinks-presentation.pdf
> There are also reports of government agencies cooperating with researchers to โbreakโ or somehow exploit Tor to de-anonymize users
Obviously there are vulnerabilities in everything and government agencies try to find them.
> In 2016, a court case brought more information to light about how the US federal government hired software engineers to effectively crack Tor and de-anonymize users.
All it shows is that they attempted to, not that they did.
> 2017 court case proves FBI can de-anonymize Tor users
No, that only happened because pedos were using an outdated version of the Tor Browser. Obviously, if you don't update your software, it'll have dangerous vulnerabilities.
> Tor developers are cooperating with US government agencies
The US government is massive and not all want to de-anonymize Tor.
> No warrant necessary to spy on Tor users
There is no proper warrant necessary to spy on anyone due to FISA.
> Tor was created by the US government (for a reason)
No it was not. It was created by Roger Dingledine and a few others.
https://www.torproject.org/about/history/
> Tor is funded by the US government
Again, the US government is massive and not all want to de-anonymize Tor.
> Tor is a tool for the US government
This should reinforce your trust in Tor as it shows that it's secure enough for government missions.
> Anybody can operate Tor nodes, including hackers, spies, and government agencies
Doesn't matter as the traffic is encrypted and no one node can see the full path.
> No quality control!
The Tor Project has many tools to blacklist malicious nodes from the network.
> Malicious Tor nodes do exist
Use https.
> IP address leaks when using Tor
Stay updated and don't do stupid shit then.
> To hide your IP address when accessing Tor, simply connect to a VPN server
FUD and disproven many times.
https://matt.traudt.xyz/posts/vpn-tor-not-mRikAa4h.html
https://tails.boum.org/blueprint/vpn_support/
https://lists.torproject.org/pipermail/tor-talk/2016-July/041757.html
> Tor developers agree on benefits of adding VPN
No they do not. That wiki page was made by one guy under the username of "proper" as is shown by the history and who is definitely not a Tor dev.
Case studies on de-anonymization of Tor users
https://www.defcon.org/images/defcon-22/dc-22-presentations/Crenshaw/DEFCON-22-Adrian-Crenshaw-Dropping-Docs-on-Darknets-How-People-Got-Caught-UPDATED.pdf
#torfud
Here are some common questions about the safety of Tor answered:
> In 2013 the Washington Post broke an article citing reports that US government agencies had figured out how to de-anonymize Tor users on a โwide scaleโ.
FUD. Disproved even by the NSA themselves.
https://edwardsnowden.com/docs/doc/tor-stinks-presentation.pdf
> There are also reports of government agencies cooperating with researchers to โbreakโ or somehow exploit Tor to de-anonymize users
Obviously there are vulnerabilities in everything and government agencies try to find them.
> In 2016, a court case brought more information to light about how the US federal government hired software engineers to effectively crack Tor and de-anonymize users.
All it shows is that they attempted to, not that they did.
> 2017 court case proves FBI can de-anonymize Tor users
No, that only happened because pedos were using an outdated version of the Tor Browser. Obviously, if you don't update your software, it'll have dangerous vulnerabilities.
> Tor developers are cooperating with US government agencies
The US government is massive and not all want to de-anonymize Tor.
> No warrant necessary to spy on Tor users
There is no proper warrant necessary to spy on anyone due to FISA.
> Tor was created by the US government (for a reason)
No it was not. It was created by Roger Dingledine and a few others.
https://www.torproject.org/about/history/
> Tor is funded by the US government
Again, the US government is massive and not all want to de-anonymize Tor.
> Tor is a tool for the US government
This should reinforce your trust in Tor as it shows that it's secure enough for government missions.
> Anybody can operate Tor nodes, including hackers, spies, and government agencies
Doesn't matter as the traffic is encrypted and no one node can see the full path.
> No quality control!
The Tor Project has many tools to blacklist malicious nodes from the network.
> Malicious Tor nodes do exist
Use https.
> IP address leaks when using Tor
Stay updated and don't do stupid shit then.
> To hide your IP address when accessing Tor, simply connect to a VPN server
FUD and disproven many times.
https://matt.traudt.xyz/posts/vpn-tor-not-mRikAa4h.html
https://tails.boum.org/blueprint/vpn_support/
https://lists.torproject.org/pipermail/tor-talk/2016-July/041757.html
> Tor developers agree on benefits of adding VPN
No they do not. That wiki page was made by one guy under the username of "proper" as is shown by the history and who is definitely not a Tor dev.
Case studies on de-anonymization of Tor users
https://www.defcon.org/images/defcon-22/dc-22-presentations/Crenshaw/DEFCON-22-Adrian-Crenshaw-Dropping-Docs-on-Darknets-How-People-Got-Caught-UPDATED.pdf
#torfud
Click on the hashtags. If the note doesn't show up, just type the hashtag in the chat. Else, the note got vanished
#afwall
#alternatives
#altfrontends
#amp
#apk
#aurora
#backup
#blockadstrackers
#bounty
#classroom
#cleaningcrap
#cloud
#cloudflare
#datacollection
#debloat
#deezer
#delete
#deodex
#disablecaptiveportal
#disablecomponents
#disablegoogle
#discord
#dns
#dnscrypt
#dontask
#e
#exodus
#facebook
#fakegapps
#faq
#fdroid
#fennec
#findyourphone
#gcam
#gmail_signin_error
#googlefi
#googletakeout
#gpslock
#graphene
#grapheneos
#gratisapps
#guide
#ipsum
#librechair
#lineagemicrog
#location
#logs
#madaidan
#magicgapps
#magisk
#mailalias
#manjaro
#microg
#mixplorer
#netoff
#news
#nitrokey
#notes
#nothingtohide
#osm
#ot
#playgames
#playpaid
#problems
#pushnotifications
#qpatch
#rh01
#riot
#safetynet
#satstat
#searchengines
#shelter
#signal
#signaturespoofing
#sigspoof
#smalipatcher
#spite
#sync
#tgclients
#todolists
#tor
#torfud
#uber
#uncensorISP
#unlppatch
#untracklinks
#vanced
#vpn
#wear
#wiki
#windows
#wireguard
#withoutgoogle
#xiaomi
#afwall
#alternatives
#altfrontends
#amp
#apk
#aurora
#backup
#blockadstrackers
#bounty
#classroom
#cleaningcrap
#cloud
#cloudflare
#datacollection
#debloat
#deezer
#delete
#deodex
#disablecaptiveportal
#disablecomponents
#disablegoogle
#discord
#dns
#dnscrypt
#dontask
#e
#exodus
#fakegapps
#faq
#fdroid
#fennec
#findyourphone
#gcam
#gmail_signin_error
#googlefi
#googletakeout
#gpslock
#graphene
#grapheneos
#gratisapps
#guide
#ipsum
#librechair
#lineagemicrog
#location
#logs
#madaidan
#magicgapps
#magisk
#mailalias
#manjaro
#microg
#mixplorer
#netoff
#news
#nitrokey
#notes
#nothingtohide
#osm
#ot
#playgames
#playpaid
#problems
#pushnotifications
#qpatch
#rh01
#riot
#safetynet
#satstat
#searchengines
#shelter
#signal
#signaturespoofing
#sigspoof
#smalipatcher
#spite
#sync
#tgclients
#todolists
#tor
#torfud
#uber
#uncensorISP
#unlppatch
#untracklinks
#vanced
#vpn
#wear
#wiki
#windows
#wireguard
#withoutgoogle
#xiaomi