1

We known that an adversary can deanonymize a user (on clearnet) if it controls both the guard and the exit node. But is that neccesary? We know that the NSA gets huge amounts of data from the internet. What stops them from having all the Tor nodes data from all the European, American ISPs without owning the nodes? So if I connect to the guard node, the NSA gets the ISP data and sees that my IP connects to that node and that node sends data to an other relay. The NSA sees the ISP data of the middle relay and does the same as before. Then in the exit node the third ISP sees that it connects to a website and the NSA sees that. So the have deanonymized me, without controlling any of the nodes.

What stops the NSA from requesting data from foreign and Local ISPs for Tor nodes and thus deanonymizing every single user? Most nodes are in Europe (US friendly), US, Canada (US friendly) and Latin America (which may cooperate).

Improve this question
1
  • which European countries are most lax in the monitoring of Tor exit nodes and the deanonymization of Tor users (most darknet-friendly)?
    – user610620
    Commented Jan 28, 2021 at 18:01

2 Answers 2

Reset to default
0

Tor does not protect against a global adversary, especially one that has access to most relays and can perform the huge amount of data logging and processing that you describe. That's why it's important for volunteers to run relays in a wide set of countries.

What stops the NSA from requesting data from foreign and Local ISPs for Tor nodes and thus deanonymizing every single user?

Many governments share data in the name of national security, but they do not necessarily give up vast amounts of their citizens' personal data or business data voluntarily without reason to foreign nations simply because they ask for it.

Improve this answer
0

The deanonymisation process itself has it's own pitfalls, but - basically - it's about the end service you're accessing. So - if the service you're using is not a trustworthy one - like Facebook or Google, for example - no darknet will save you, including Tor. But if you're safe here - so the only feasible way to deanonymise you is a time correlation attack. Most of the true services do have a dot-onion addresses, so use them to defeat even this vector.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .