Is Tor Broken? How the NSA Is Working to De-Anonymize You When Browsing the Deep Web « Null Byte :: WonderHowTo

Ever since the FBItook down the Silk Road and Dread Pirate Robertslast month, many questions have been raised about whetherTorstill provides anonymity or not, and if it's now broken. I'll try to address that question here today succinctly from multiple angles, keeping it as simple and plain-language as possible.The Closing of Silk RoadFirst, let's address the Silk Road takedown. According topublished reports, the FBI relied upon good old investigative techniques to track down Dread Pirate Roberts. They gave no indication that they used a flaw in Tor to do this, but if they did and didn't tell us, it would not be the first time the FBI was disingenuous with the American public.Even if the FBI did not use flaws in Tor to take down Silk Road, there remain questions about whether Tor still delivers the anonymity that so many have assumed it did. Let's take a look at some of the techniques that NSA is employing right now to break your anonymity on the Tor network.The Snowden RevelationsEdward Snowden, the NSA contractor now in exile in the Russian Federation after leaking information of NSA spying on innocents across the globe, revealed some information on how NSA is cracking Tor.Tor has always been a thorn in the NSA side as they hate anyone that can do anything without the NSA being able to spy on them. As such, they have focused significant resources to be able to open Tor to their spying.As you know, Torrelies upona series of volunteer Tor relays or routers to move data across the globe, similar but separate from the routers that are used on the Internet. These routers are usually individuals who lend some of their bandwidth in the interest of global privacy and anonymity. These routers only track the last IP address the packet came from and is going to and not the original source IP.It turns out that the NSA has set up some of their own Tor routers to be able to track some of the Tor network traffic. By setting up their own Tor routers, the NSA is able to sniff some of the Tor traffic as it passes their relay/router.Of course, this doesn't give them a peek atallTor traffic (they would have to set up thousands of Tor routers and make certain that traffic did not access the other routers to do this), but it does give them a peek of at least some of it.Anecdotally, this past summer, I was working at a major Department of Defense contractor near NSA headquarters at Ft. Meade and noticed that my Tor browsing speed was much faster than I usually experience in my hometown in the Rocky Mountains of the U.S. The NSA's Tor routers with dedicated bandwidth were likely why.The Firefox FlawsIt also turns out that the NSA had been taking advantage of a zero-day vulnerability in the Firefox web browser used by Tor. NSA has been embedding cookies that tracked Tor users on the net. That flaw has been closed by the Mozilla Project, but you may still have that cookie in your browser and are being tracked by NSA.For optimal anonymity, delete your cookies and update your Tor browser.SSL Is Not as Secure as You ThinkNSA has been working on cracking SSL encryption for some time. Tor is dependent upon SSL and its 1024-bit encryption to maintain its anonymity. Each relay only decrypts enough information to be able to send the packet to the next relay. These 1024-bit keys are rapidly becoming outdated as computing horsepower has increased.Recognizing this, the Tor project has been moving to the far more secure elliptical curve cryptography (ECC). Unfortunately, only about one-quarter of all Tor sites have updated to the more secure elliptical curve cryptography, leaving three-quarters of Tor traffic susceptible to NSA decryption and snooping.How Google Ads Hurt UsApparently, NSA has also been using advertising services like Google AdSense to be able to track Tor users. Here's how it works.When you're using Tor and click on an ad, it places a cookie in your browser. When you use that same browser—even while not using Tor capabilities and the Tor network—the NSA can look for that cookie to identify you as a Tor user.They can then correlate that cookie with your actual IP address that appears on every website when you're not using Tor.Entry & Exit PointsAs the NSA has access to ALL traffic on the Internet, and all Tor traffic looks different from regular Internet traffic, they can identify Tor traffic from other Internet traffic.It has long been known that if an adversary had access to both the entry and exit points on Tor, they can determine both the user and the destination.It goes without saying, that the NSA has access to all of this information, so if they want, they can identify you and your destination.ConclusionIt seems clear that the absolute privacy that we assumed Tor provided us has been compromised by the NSA, but this doesn't mean that Tor is useless.All of these techniques employed by the NSA give them a glimpse at a slice of Tor traffic, but not all of it. What it does mean, though, is that if the NSA wants to track your Tor movements on the web, they can.It helps that if you are using the Tor browser for anonymity, use a different browser for your regular Internet navigation. Barring the fact that the NSA has targeted you for surveillance, Tor still provides some relative anonymity—but not absolute anonymity on the web—so be careful out there!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseNSAimage via The Hacker News,sliced onionandmoldy onionvia ShutterstockRelatedTor for Android:How to Stay Anonymous on Your PhoneHow To:Access Deep WebHack Like a Pro:How to Keep Your Internet Traffic Private from AnyoneHack Like a Pro:How to Hack Like the NSA (Using Quantum Insert)How To:Access the Dark Web While Staying Anonymous with TorHow To:With the Silk Road Bust, the Online Black Market Already Has a New HomeThe Hacks of Mr. Robot:How Elliot & Fsociety Made Their Hack of Evil Corp UntraceableBlackphone:The Answer to NSA SnoopingHow To:Detect Misconfigurations in 'Anonymous' Dark Web Sites with OnionScanHow To:The Top 80+ Websites Available in the Tor NetworkHow To:Become Anonymous & Browse the Internet SafelyHow To:Fully Anonymize Kali with Tor, Whonix & PIA VPNHow To:Browse the web anonymously using Privoxy and TorHow To:Use Private Encrypted Messaging Over TorNews:Reality of VPNs, Proxies, and TorEditor Picks:The Top 10 Secret Resources Hiding in the Tor NetworkTor vs. I2P:The Great Onion DebateNews:Anonymity, Darknets and Staying Out of Federal Custody, Part Three: Hidden ServicesAnonymous Browsing in a Click:Add a Tor Toggle Button to ChromeNews:Anonymity, Darknets and Staying Out of Federal Custody, Part Two: Onions and DaggersHow To:Completely Mask & Anonymize Your BitTorrent Traffic Using AnomosNews:Anonymity, Darknets and Staying Out of Federal Custody, Part Four: The Invisible InternetNews:Anonymity Networks. Don't use one, use all of them!Whistleblower:The NSA is Lying–U.S. Government Has Copies of Most of Your EmaHow To:Become Anonymous on the Internet Using TorNews:Anonymity, Darknets and Staying Out of Federal Custody, Part One: Deep WebNews:Joel Sherman Breaks Scrabble Record with 803-Point GameHow To:Use Tortunnel to Quickly Encrypt Internet TrafficNews:NSA Axes Printed SCRABBLE News in Favor of Online PDFsNews:Feds arrest several in connection to Drugs on Tor networks 'Silk Road'News:Make an "On/Off" Tor Button for ChromeHow To:Quickly Encrypt Your Web Browsing Traffic When Connected to Public WiFiNews:Info on Prop. 22