Bonum Certa Men Certa

Why Tor Isn’t Safe



Reprinted with permission from Ryan Farmer

Tor is a project funded by the United States Federal Government.



They have hired people affiliated by the Tor Project who know where the weaknesses are, to help them stockpile and weaponize vulnerabilities. It has even commissioned malware attacks against the computer of the Tor users.



Over 27.5% of the Tor Exit Nodes, which lead back to the public Internet, are owned by a single entity. (As of 2021.)



The security researcher who gave that figure says they suspect the same entity has at least 1-3% of the exit nodes on top of the 27.5% figure.



This would mean that almost 1 in 3 Tor Exit Nodes are owned by the same entity.



As of two years ago, 79% of all Tor Nodes (not just the Exit Nodes) were hosted in a 14 Eyes Alliance country. Countries whose intelligence agencies have spy on each other, and then pass around, to bypass domestic surveillance laws and the United States Constitution.



The Tor Browser itself is basically a modified version of Firefox. By default, it has all active content (JavaScripts, WASM executable support, media codecs, etc.) available and exposed to the Web, and no ad blocker.



They claim this is to make everyone look the same, but in reality it means thousands of security vulnerabilities from a Web browser that has a really lousy track record on that subject.



While facilitating a vandal on the TechRights IRC network, who is very clearly an unhinged person, and other crime, Tor doesn’t seem to attract a lot of legitimate usage.



But it’s designed as a trap.



It’s obviously not “anonymous” and certainly not if you use it like it comes and on top of some spyware OS like Windows or the Mac.



I would call the Tor Project itself almost something of a trap to lure users onto a compromised Web browser, and a network that has largely been hijacked at the Entry and Exit points by the same government that funds it.

Recent Techrights' Posts

Public Talk by Richard Stallman (RMS) Tomorrow
Still advertised
Soylent News Editor Stays, Trolls Leave Instead
Some of us asked him not to resign but pause and reconsider
Corporate Media Did Not Report on Mass Layoffs at IBM's Expert Labs
Not a single media outlet even mentioned those mass layoffs!
In BetaNoise, The "Latest Technology News" is Noise (Still!)
If you fail to get the slop under control, the site as a whole will perish
Defaming, Impersonating, Hijacking Accounts is Abusive If Not Illegal/Criminal Behaviour
There are actual victims here
If Your Bicycle Got Stolen, Then Open a Facebook Account and Send the US Lots of Personal Data to Get the Bicycle Back (or Try to)
"No Help Unless You Open an Account at Facebook"
Growing Recognition Out There That Courts Must Abandon Microsoft or Have No Perception of Authority, Autonomy, Independence, Fairness, and More
Imagine making a complaint about Microsoft to an agency that uses Microsoft
The Next Talk of Richard Stallman (Father of GNU/Linux and the GPL) Advertised in the Media 3 Days in Advance
He spoke in Italy earlier this year and also did some interviews
Free Software as a Culture of Resistance
Free software as a movement accomplished a lot in 40+ years
 
The Next Two Phases of Our Open Source Initiative (OSI) Series
Whatever people used to think about the OSI is no longer applicable and its current acronym is a misleading misnomer
Richard Stallman Has Barely Changed
Collecting "estate" "assets"? That's not "success" in the eyes of Dr. Stallman
Gemini Links 25/05/2025: Konsole Layout Changes and Capitulation to Surveillance World
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, May 24, 2025
IRC logs for Saturday, May 24, 2025
Links 24/05/2025: From War on Science to War on Academia, Chagos Islands Handed Over to Mauritius
Links for the day
Links 24/05/2025: Leasehold Myths and Analog Computer
Links for the day
Links 24/05/2025: Google Helps Slop Videos, Microsoft Resorts to Desperate Measures to Fake Demand for Slop
Links for the day
Gemini Links 24/05/2025: New Home and Force/Drag Simulation
Links for the day
Sometimes Legal Action is Imperative (Even if Recovering the Cost of the Litigation Itself is Infeasible)
Sirius got sued, but the company has no money (large piles of debt)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, May 23, 2025
IRC logs for Friday, May 23, 2025
Simpler is Better
Gemini Protocol turns 6 in exactly 4 weeks
Slopwatch: Brian Fagioli, Brittany Day, and Other Plagiarists Who Rip Off Real Writers and Target Themes Around "Linux"
Fagioli also prompted chatbots for some words diarrhoea
Links 23/05/2025: Microsoft Openwashing at ZDNet, Signal Does It Wrong (DRM, Back Doors Still Intact)
Links for the day
Gemini Links 23/05/2025: Clutter in Modern Interfaces and Dealing With DRM-Free Music
Links for the day
Links 23/05/2025: Tax Audits of Hong Kong's Independent as ‘Intimidation Tactics,’ Why "Regulating X Isn’t Censorship"
Links for the day
TecAdmin Took a Break From Linux to Push SPAM
This happened hours ago, and it seems to have been posted directly by the site's "Admin" (Rahul)
The Microsofter Who Kept Sending Threatening Post and E-mail to My Wife Has Been Joking He'd Work on Code for "Sexual Favours"
For one thing, for software professionals (like for landlords), this is outright illegal and you'd get arrested for it, and moreover it's no joking matter because there are many real victims of such sexual exploitation
We Seem to Have Abandoned Science and Replaced Sound Policy With Private Patent Shareholders and College Dropouts Like Bill Epsteingate
Because of what they did there are now many people out there who reject all vaccines
Links 23/05/2025: Violent Attacks on the Press, VMware Price Hikes, Vista 11 Considered Unsuitable for Any Confidentiality
Links for the day
Gemini Links 23/05/2025: Balkan Tourism, UK Polls, Reticulum and Meshtastic
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, May 22, 2025
IRC logs for Thursday, May 22, 2025
Back to Basics, Folks, "AI" (Plagiarism) is Symptom of a Dying Industry Looking for Whatever Prey It Can Devour
lousy/sloppy imitations
Liam Proven's Thoughts on "AI" Being a Scam No Different From Religions, Alternative Medicine, and More
"Is there anywhere outside of retrocomputing that doesn't have AI in it?"
Many IBM Layoffs, Centred Around Expert Labs US in Atlanta (Offer of "Relocation" Where No Such Option Exists)
So Techrights was assessing comments/gossip online and it was right about the Thursday cull