Tor vs. I2P: The Great Onion Debate « Null Byte :: WonderHowTo

In my recentDarknet series, I attempted to connect the dots on the Deep Web. I covered the two largest anonymity networks on the Internet today,TorandI2P. While my initial four articles were meant as an introduction, I ended up receiving a lot of interesting comments and messages asking the technical differences between the two. I'd like to thank all of you for letting me know what was on your minds, as you should always!With this article, I am going answer those questions and better explain the pros and cons of each, breaking down the networks, pitfalls, and things you should know to be safe. But first, let's take a brief jump back into the Deep Web to better explain these tools in order to give you the knowledge to make more informed choices.Back to OnionsTor and I2P are both anonymizing networks, allowing people to tunnel out of their open and non-secure environments. However, they achieve this in slightly different ways.As a quick recap, onion routing involves wrapping yourpacketsin multiple layers of encryption, in a system where each router that passes it along only has the key to decrypt its layer and none of the others. This way, each router can only see the router that sent it the packets and the router it in turn must send the packets to. It's how this is performed that draws its contrasts. Let's take a look at each in more detail.TorTor has been around quite a while longer then I2P. As a result, it has been studied much more in depth by both thewhite hatandblack hatcommunities. In my Tor article, I mentioned it was better designed as an out-proxy than I2P is. This is because there are many more exit nodes on the Tor network then on I2P, and with the ability to useTLSand bridges, Tor also performs better at evading state-level firewalls (think China and Iran).The only reason anyone would be changing the I2P config would be to set up port forwarding, and that's a bit out of this article's scope (though a great idea for a future one). Tor is a simpleSOCKSproxy, so your only choice is to be a relay, exit node, or client node. Tor also has advantages in that it holds a large number of talented developers, some of them are even funded. In fact, Tor receives a good amount of money for its maintenance and development, and this shows in the form of its excellent documentation and white papers.On that note, Tor is written in C, as opposed to I2P's Java. This means that the Tor client typically runs faster and with a smaller memory footprint.Tor takes the directory-based approach, providing a centralized point to manage the overall 'view' of the network, as well as gather and report statistics, as opposed to I2P's distributed network model. This centralization reduces complexity at each node and can efficiently addressSybil attacks.I2PI2P was designed with the internal network in mind. Steps have been taken to provide a better environment for hosting services rather then providing out-proxies. This is the fundamental difference between I2P and the Tor network. I2P was designed and optimized for hidden services, which are much faster than in Tor, as the network is fully distributed and self-organizing. Helping this is the fact that peers are selected by continuously profiling and ranking performance, rather than trusting claimed capacity.I2P is packet switched, instead of circuit switched, like the Tor network. This means transparent load balancing of messages across multiple peers, rather than a single path. Essentially, all peers participate in routing for others. Also along these lines, I2P's API was created for anonymity, unlike SOCKS, which is designed for functionality. As Tor uses SOCKS, I2P tends to fare better for security than Tor, but keep in mind most peoplewill nothave a threat model where this would be of concern, as attacks tend to be highly complex.Lastly, tunnels in I2P are short lived, decreasing the number of samples that an attacker can use to mount an active attack with, unlike circuits in Tor, which are typically long lived.What Is Best for Me?That's a very open ended question. At times, it falls to a technical choice, an example being P2P file sharing over I2P, where as Tor does not support (nor encourage) it. Other times it depends on your personal choices. You will find the content on the Tor and I2P networks to vary. It is not to say you should not host services on Tor, or should not out-proxy with I2P, but the networks are designed with different strengths in mind.Perhaps the answer to the question is what I do. I use both.Generally, if you are looking for a robust SOCKS out-proxy, Tor is a great choice. Granted a number of exit nodes have been blacklisted to prevent abuse, the network still has plenty more.If you want to host hidden services, then I2P would be your better choice, as you are afforded the added protection of decentralization and higher speeds to go along with it.ShortfallsUsing these tools, you are only as anonymous as you allow yourself to be. Doing things like logging into your personal Facebook account or checking your personal email while using these networks will remove a good chuck of what is protecting you and keeping you safe. It's wise to keep a few guidelines in mind:Think of your 'clear' net identity and your darknet identity as two separate things. Do not mix the two.Avoid using any personal information or distinguishing remarks on the network—remember to be someone else. Don't leave clues as to who you really are.You should never use your normal browser to view resources through the networks, only use the bundled browsers, or manually turn off those services. Flash and Java are especially good at betraying your location and IP address to servers. Turn them both off.Tor Exit NodesA brief word about exit nodes.An exit node is a machine that sits on the edge of the darknet. It acts as an intermediary between yourself and the outside Internet. As such, the exit nodes are routing all sorts of unsavory traffic, pretty much all the bad things you might expect to find hidden on a darknet. While Tor does give you the option to function as an exit node, unless you wish to have a talk with the police, leave it alone.In this case, what you can choose is a non-exit relay. This lets you help with forming more random and unique routes on the network. Helping your mates browsing along with you by giving them more security all while speeding up your own traffic. Why you are on this screen, you can change your bandwidth settings to reflect your capabilities as well.Now, I want to hear from you!What do you use Tor and I2P for? Do you like one over the other? Why?As always if you have any comments or questions, please let me know in the comments below, visit ourforum, or come say hello in ourIRCchannel!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseImages byI2P,PopSci,MisesRelatedHow To:Access Deep WebNews:Use ProtonMail More Securely Through the Tor NetworkSPLOIT:How to Make a Proxy Server in PythonHow To:The Top 80+ Websites Available in the Tor NetworkHow To:Set Up an SSH Server with Tor to Hide It from Shodan & HackersHow To:Hack TOR Hidden ServicesHow To:With the Silk Road Bust, the Online Black Market Already Has a New HomeHow To:Access the Dark Web While Staying Anonymous with TorHow To:Is Tor Broken? How the NSA Is Working to De-Anonymize You When Browsing the Deep WebTor for Android:How to Stay Anonymous on Your PhoneHow To:Install ParrotSec Sealth and Anonsurf Modules on Kali 2.0News:Anonymity Networks. Don't use one, use all of them!News:Anonymity, Darknets and Staying Out of Federal Custody, Part Four: The Invisible InternetNews:Anonymity, Darknets and Staying Out of Federal Custody, Part Three: Hidden ServicesNews:Anonymity, Darknets and Staying Out of Federal Custody, Part Two: Onions and DaggersHow To:Use I2P to Host and Share Your Secret Goods on the Dark Web—AnonymouslyEditor Picks:The Top 10 Secret Resources Hiding in the Tor NetworkHow To:Become Anonymous on the Internet Using TorHow To:Use Tortunnel to Quickly Encrypt Internet TrafficNews:Full NBC Jerry Brown vs. Meg Whitman DebateUntraceable:How to Seed Torrents Anonymously Using I2PSnarkHow To:Networking Basics for the Aspiring HackerAnonymous Browsing in a Click:Add a Tor Toggle Button to ChromeNews:Feds arrest several in connection to Drugs on Tor networks 'Silk Road'Movie Quiz:Old School - DebateMovie Quiz:Old School - DebateNews:Netflix and Redbox Info GraphicsNews:Make an "On/Off" Tor Button for ChromeWeekend Homework:How to Become a Null Byte Contributor (3/2/2012)How To:Completely Mask & Anonymize Your BitTorrent Traffic Using AnomosNews:The Great HARRY POTTER Debate 2010News:Flash or H.264? (via Videomaker)Weekend Homework:How to Become a Null Byte Contributor (2/24/2012)News:Piratebay - To be blocked in the UKNews:Republican Arizona debateNews:Dahmer vs. GacyNews:Arrived in Denver at the Starfest Convention!