Timeline for ISP & LEO tracking on Tor
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 17, 2017 at 10:46 | history | edited | CommunityBot |
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
|
|
| Dec 4, 2016 at 17:02 | comment | added | Alexey Vesnin♦ | One more addition to Screinario One: a malicious ISP are usually running MitM attacks to decrypt on-flight the secured content. Only in that case the HTTPS is potentially vulnerable. I say potentially because ther're a lot of ways to check the authenticity of a certificate, even some of them are embedded out-of-the-box in most of the software and/or HTTPS itself, like PKI | |
| Apr 1, 2016 at 8:03 | comment | added | Yuriko | To answer your first question, the ISP only see your address, and your entry node's address. They don't know which site you are browsing because that information is encrypted in the packet sent to your entry node. Like in my previous comment when I tried to explain what a VPN is, the Post doesn't know that you are communicating with Bob (only to Eve). Unless they open your envelopes, but here we suppose they can't. (It's encrypted.) | |
| Apr 1, 2016 at 7:58 | comment | added | Yuriko | To answer your last question about trusting or not the websites, the choice is yours. Yes, the risk exists. They may even have put backdoors in your OS. But eh, at some point you have to trust some things. | |
| Apr 1, 2016 at 7:55 | comment | added | Yuriko | Using a VPN is like using an intermediary, Eve. Instead of sending your envelope to Bob, you put it in another envelope that you send to Eve. The post will know that you are communicating with Eve, but not with Bob! When Eve gets your envelope, she opens it to get your original envelope. She opens that original envelope and put the letter in a new one, from Eve to Bob, and sends it. Bob replies to Eve, and Eve forwards it to you (Alice). Bob doesn't know that he's communicating with you, or at least, he thinks that you live at Eve's address. The Post only know that you are talking to Eve. | |
| Apr 1, 2016 at 7:46 | comment | added | Yuriko | To explain what a VPN is, let's make an analogy with the post: internet packets are now letters that you put in envelopes. You are Alice and want to communicate with Bob, so you send him a letter, and you write on the envelope your and Bob's addresses. (It's important to write your address, so Bob know where to send its letters). The Post (i.e. ISP) knows that you are communicating with Bob, because of the addresses on the envelope. | |
| Apr 1, 2016 at 1:39 | comment | added | Jay_Man | As for LEO (or LEA for agency) operating or molesting a site's code as with Freedom Host, wouldn't it be safe to say that you can't really trust any site because the LEA might be any one of them? Thank you again for your time and insight. | |
| Apr 1, 2016 at 1:39 | comment | added | Jay_Man | Thank you @Yuriko. Perhaps what I'm having difficulty grasping is that when an ISP sees a data transfer, why can't they just open Tor and see what it is? Then again you mention VPN and I know nothing about VPN other than "what's on the brochure." | |
| Mar 31, 2016 at 8:40 | history | answered | Yuriko | CC BY-SA 3.0 |