671
you are viewing a single comment's thread
view the rest of the comments
[-] HiroProtagonist@lemmy.ca 2 points 1 month ago

Does this government funding really ever result in a hands off approach. In the case of Tor I wouldn't be surprised that funding comes with backdoor access.

[-] rbesfe@lemmy.ca 12 points 1 month ago

TOR fundamentally cannot be backdoored. The US government funds it because more traffic on the network helps mask the traffic coming from CIA agents and the like

[-] HiroProtagonist@lemmy.ca 4 points 1 month ago

I'm not going to outright disagree with your opinion but I honestly have my doubts.

[-] CanadaPlus@lemmy.sdf.org 7 points 1 month ago
[-] HiroProtagonist@lemmy.ca 1 points 1 month ago* (last edited 1 month ago)

Yeah whatever. Sorry you got butthurt.

[-] CanadaPlus@lemmy.sdf.org 7 points 1 month ago

Look, you either check for yourself, or trust people who have. The only other option amounts to building your own parallel reality.

[-] HiroProtagonist@lemmy.ca 1 points 1 month ago
[-] CanadaPlus@lemmy.sdf.org 7 points 1 month ago

You can also take an intermediate approach, actually. Usually I can tell from just the developer docs or whitepapers if something has a way of producing the guarantees it claims.

[-] BeardedGingerWonder@feddit.uk 1 points 1 month ago

Showing my ignorance here, but would genuinely like an explanation - aren't/weren't compromised exit nodes a thing?

[-] KeenFlame@feddit.nu 1 points 1 month ago

No system can be proven to have no exploits, but a backdoor is when there is a hidden prepared exploit planted on the inside (in this case presumably because they were funded by the government they assume they would get this in return, even though if that was the case they would do a crypto transaction and not openly fund them)

[-] KeenFlame@feddit.nu 7 points 1 month ago
[-] HiroProtagonist@lemmy.ca 2 points 1 month ago

The last reply I will make.

From September 19 2024

"In response, the Tor Project acknowledged that one user of an outdated application called Ricochet was likely deanonymized through a “guard discovery attack.” However, they emphasized that this vulnerability has since been patched in current versions of Tor software."

https://cybersecuritynews.com/tor-claims-network-safe/

[-] BoulevardBlvd 3 points 1 month ago

but that wasn't his last reply

[-] KeenFlame@feddit.nu 2 points 1 month ago

Excuse me? Are you saying using guard discovery is a backdoor someone gave to the government? I mean, you can think whatever, but the technology isn't really.. backdoorable? It doesn't make sense in the context. Where will the backdoor lead? It has no where to go.

[-] JackbyDev@programming.dev 4 points 1 month ago

(I am a different person, not arguing anything about this particular vulnerability or the government's funding of Tor.)

I think you're defining backdoor too literally. I get your point, but colloquially it just means to get something nefarious in. If someone is saying "the government has a backdoor in an encryption algorithm" it would mean they believe the government has a vulnerability in that allows them to easily break the encryption, not necessarily a separate "door" or something.

[-] KeenFlame@feddit.nu 1 points 1 month ago

Yeah the government has an institutional thing I forget what it is called, with massive amount of known exploits. That's not backdoors. A backdoor is a "planted" exploit, not a discovered exploit. It makes no sense to call all exploits backdoors.

[-] HiroProtagonist@lemmy.ca 1 points 1 month ago

Okay buddy keep it going as long as you need to. You might enjoy Reddit more, it's a safe space for people who cannot change their opinions. Bye.

[-] KeenFlame@feddit.nu 1 points 1 month ago

Why? I am trying to understand what you mean so I can change my opinion. I'm not changing it because you are fuming and escalating the aggression, in fact, that has the exact opposite effect

this post was submitted on 08 Apr 2025
671 points (100.0% liked)

Open Source

36802 readers
82 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS