2026-08-04 23:42 UTC
Replies (3)
-
@ApostateEnglishman@mastodon.world 2026-08-05 00:05
@benroyce@mastodon.social @mike805@noc.social @ohir@social.vivaldi.net @rootschange@kolektiva.social @scathach@stereophonic.space Tor is still effective combined with other privacy tools such as OTR messaging with forward secrecy. The trouble is most users still don't realise that traffic between the exit node and open internet isn't encrypted by default, so they make stupid mistakes. The point of Tor is that everyone is Spartacus; it doesn't make you invisible! That's a severe limitation of the tech requiring careful planning to mitigate depending on the specific use case.
-
@mike805@noc.social 2026-08-04 23:45
@benroyce@mastodon.social @ohir@social.vivaldi.net @rootschange@kolektiva.social @scathach@stereophonic.space Tor is a centrally run service. It has its use cases, but hiding a server from the USA government is not one of them. If someone did want to run a dark market on Tor, the key thing would be making sure that capture of the server did not lead to capture of the operator. So far the operators have not done that too well. If you put enough mass in one place, yes they will find you. So build a service where there are many small beans.
-
@mike805@noc.social 2026-08-04 23:47
@benroyce@mastodon.social @ohir@social.vivaldi.net @rootschange@kolektiva.social @scathach@stereophonic.space My point is, fat targets get hit. You are a fat target if (a) there is a lot of value in one place, or (b) you are pissing people off. Structure the system so there are no fat targets, OR put the fat target (ThePirateBay) in a place where it's hard to hit. As an alternative to Tor, i2p is too small. It doesn't provide a big enough crowd to hide in yet. And it's too hard to set up.