All the recent dark net arrests seem to be pretty vague on how the big bad was caught (except the IM admin’s silly opsec errors) In the article they say he clicked on a honeypot link, but how was his ip or any other identifier identified, why didnt tor protect him.

Obviously this guy in question was a pedophile and an active danger, but recently in my country a state passed a law that can get you arrested if you post anything the government doesnt like, so these tools are important and need to be bulletproof.

  • MalReynolds@slrpnk.net
    link
    fedilink
    English
    arrow-up
    33
    ·
    2 months ago

    Compromised ? Maybe, but this guy doesn’t provide any evidence one way or the other. He’s using at least 7 other possible vectors (apparently Calculator Photo Vault just hides the gallery, no encryption, so it’s over right there) which is way too many for good opsec.

    With Tor the question has always been compromised exit nodes as I understand it.

    • nnullzz@lemmy.world
      link
      fedilink
      arrow-up
      12
      ·
      edit-2
      2 months ago

      In that article they provide a list of steps to follow to be safer on Tor. Is that a good list or is there anything else one can do to maintain their privacy?

      • MalReynolds@slrpnk.net
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 months ago

        No idea, I was just using it to illustrate the existence of compromised exit nodes, which to my mind are a pretty fatal flaw in TOR, perhaps someone knowledgeable can chime in.

      • mox@lemmy.sdf.org
        link
        fedilink
        arrow-up
        11
        ·
        edit-2
        2 months ago

        Not against a government that can compel the organizations who issue the https certificates and run the https servers. And not against leaks that occur outside of https.

      • refalo@programming.dev
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        2 months ago

        I wouldn’t be surprised if more than one root CA was compromised… especially the free ones.