Cifra-te ou Devoram-te
0xCFD0
# 01010110010101011
Introduction to Online Privacy and Anonymity (Part 2)
The Tor project

Mission: be the global resource for technology, advocacy, research and education in the ongoing pursuit of freedom of speech, privacy rights online, and censorship circumvention.

What is Tor?
  • Online anonymity
    • FL/OSS
    • Open (volunteer based) network
  • Community: researchers, developers, users, relay operators, [...]
  • U.S. 501(c)(3) non-profit organization
Estimated ~2,000,000+ Tor users (daily)

Understanding your thread model:

I use encryption (HTTPS, ...) my ISP cannot see my traffic! Maybe it cannot see your traffic (in cleartext), *but* it tracks:

  • Websites visited
  • Locations logs
  • IP address logs
  • ..archived for x time: Data retention
VPN / Proxy Providers
VPN / Proxy Providers: (often) single point of failure
VPN / Proxy Providers: (often) single point of bypass

Anonymity: different interests for different user groups

Anonymity: different interests for different user groups

Anonymity: different interests for different user groups

Anonymity: different interests for different user groups

Anonymity: different interests for different user groups

How Tor works

Source: Tor teachers
Source: Tor website
Source: Tor website
Source: Tor website
Source: Tor metrics
Source: Tor metrics

Tor's safety comes from diversity

  • Diversity of relays
  • Diversity of users

Transparency for Tor is key

  • FL/OSS
  • Public design documents and specifications

But what about the bad people?

  • (remember) the millions of daily users
  • Still a two-edged sword?
  • Good people need Tor much more than bad people need it

Onion services

  • Self authenticated
  • End-to-end encrypted
  • Built-in NAT punching
  • Limit surface area
  • No need to “exit” from Tor
Source: Tor metrics
  • About 3% of Tor's traffic has to do with onion services at all
  • Onion services are still in the "neat toy" stage
  • Terbium labs (and others) found ~7000 useful onion sites
Source: ParkerHiggins
Source: OnionShare git repository
Source: OnionShare git repository

How can you help Tor?

  • Run a relay (or a bridge)
  • Teach your friends about Tor, and privacy in general
  • Help fix -- and fix -- bugs
  • Work on open research problems (petsymposium.org)
Protect your privacy https://www.torproject.org/download/download-easy.html/