The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes –...
Transcript of The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes –...
![Page 2: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/2.jpg)
In the future everyone will be anonymous for 15 minutes – Banksy
![Page 3: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/3.jpg)
The Tor Project, Inc. 501(c)(3) non-profit dedicated to
the research and development of tools for online anonymity and privacy
![Page 4: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/4.jpg)
The Tor Project, Inc. 501(c)(3) non-profit dedicated to
the research and development of tools for online anonymity and privacy
Thousands of volunteers running relays
![Page 5: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/5.jpg)
The Tor Project, Inc. 501(c)(3) non-profit dedicated to
the research and development of tools for online anonymity and privacy
Thousands of volunteers running relays
Dozens of volunteer developers
![Page 6: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/6.jpg)
The Tor Project, Inc. 501(c)(3) non-profit dedicated to
the research and development of tools for online anonymity and privacy
Thousands of volunteers running relays
Dozens of volunteer developers
Between 7-15 paid developers at any given time
![Page 7: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/7.jpg)
All personal life rested on secrecy, and possibly it was partly on that account that civilized man was so nervously anxious that personal privacy should be respected.
- Anton Chekhov The Lady with the Little dog
![Page 8: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/8.jpg)
What is anonymity?
![Page 9: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/9.jpg)
Anonymity isn't cryptography: Cryptography just protects
contents
Alice
Bob
“Hi, Bob!”“Hi, Bob!”
<gibberish>
attacker
![Page 10: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/10.jpg)
Anonymity isn't just wishful thinking...
“You can't prove it was me!”
“Promise you won't look!”
“Promise you won't remember!”
“Promise you won't tell!”
“I didn't write my name on it!”
“Isn't the Internet already anonymous?”
![Page 11: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/11.jpg)
What is Tor? Online anonymity: software, network,
protocol
![Page 12: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/12.jpg)
What is Tor? Online anonymity: software, network,
protocol Free software
![Page 13: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/13.jpg)
What is Tor? Online anonymity: software, network,
protocol Free software Community of researchers, developers,
and relay operators
![Page 14: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/14.jpg)
What is Tor? Online anonymity: software, network,
protocol Free software Community of researchers, developers,
and relay operators Funding from US DoD, EFF, Voice of
America, Google, NLNet, Human RightsWatch, ...
![Page 15: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/15.jpg)
Though he flick my shoulders with his whipI will not tell him which way the fox ran
- Edna St. Vincent Millay Conscientious Objector
![Page 16: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/16.jpg)
Threat model:what can the attacker do?
AliceAnonymity network Bob
watch (or be!) Bob!
watch Alice!
Control part of the network!
![Page 17: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/17.jpg)
The simplest designs use a single relay to hide connections
Bob2
Bob1
Bob3
Alice2
Alice3
E(Bob3,“X”)
E(Bob1, “Y”)
E(Bob2, “Z”)
“Y”
“Z”
“X”
(example: some commercial proxy providers)
Alice1
Relay
![Page 18: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/18.jpg)
But a single relay (or eavesdropper!) is a single point of
failure
Bob2
Bob1
Bob3
Alice2
Alice3
E(Bob3,“X”)
E(Bob1, “Y”)
E(Bob2, “Z”)
“Y”
“Z”
“X”
Alice1
Evil Relay
![Page 19: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/19.jpg)
… or a single point of bypass
Bob2
Bob1
Bob3
Alice2
Alice3
E(Bob3,“X”)
E(Bob1, “Y”)
E(Bob2, “Z”)
“Y”
“Z”
“X”
Alice1
Irrelevantrelay
![Page 20: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/20.jpg)
So, add multiple relays so thatno single one can betray Alice
Bob
R1R3
R4 R5
Alice
R2
![Page 21: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/21.jpg)
A corrupt first hop can tell that Alice is talking, but not to whom
Bob
R3
R4 R5
Alice
R1
R2
![Page 22: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/22.jpg)
A corrupt final hop can tell that somebody is talking to Bob, but
not whoBob
R1
R4 R5
Alice
R3
R2
![Page 23: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/23.jpg)
But the network layer is not the only problem
Browsers and plugins can de-anonymize you too
Browsers are unique
Plugins almost always ignore proxy settings
Plaintext over Tor still plaintext
![Page 24: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/24.jpg)
Torbutton
Firefox extension (Chrome in-process)
Enables/disables Tor use in the browser
Disables plugins by default
![Page 25: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/25.jpg)
Who uses Tor and why?
![Page 26: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/26.jpg)
Who uses Tor and why? Normal people Law enforcement Human rights
activists Business executives Militaries Abuse victims Whistleblowers
![Page 27: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/27.jpg)
Estimated 500,000 daily Tor users
![Page 28: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/28.jpg)
Tor and Circumvention
![Page 29: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/29.jpg)
Tor and Circumvention
![Page 30: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/30.jpg)
Tor and CircumventionWhat happened around September 25th, 2009?
![Page 31: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/31.jpg)
Tor and CircumventionWhat happened around September 25th, 2009?
China blocked most of the Tor network in anticipation of the CCP 60th anniversary
![Page 32: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/32.jpg)
Tor and Circumvention
![Page 33: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/33.jpg)
Tor and Circumvention
![Page 34: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/34.jpg)
Want to help?
Run a bridge
Run a relay
Help us hack on stuff!
More information at https://www.torproject.org/
![Page 35: The Tor Project€¦ · Codebits 2010. In the future everyone will be anonymous for 15 minutes – Banksy. The Tor Project, Inc. 501(c)(3) non-profit dedicated to the research and](https://reader033.fdocuments.net/reader033/viewer/2022053006/5f0a5ad67e708231d42b3c32/html5/thumbnails/35.jpg)
Credits and Links Irving Penn / Steinberg In Nose Mask Recreation:
Summer Luu via Flickrhttp://www.flickr.com/photos/summerluu/2388805263/
“How Unique is Your Browser?” https://panopticlick.eff.org/browser-uniqueness.pdf
Tor Metrics Portalhttps://metrics.torproject.org/