It's doesn't have to control all the nodes, but as soon as the same entity controls both the entry and the exit node for a connection it doesn't matter one bit if the connection is routed over fifty other nodes in between - it has fully compromised said connection, it knows its original IP and can log the entire content of the connection. All it needs for an organization to fully compromise TOR's anonymity would be to run a sufficiently huge amount of nodes. Your IP isn't the only personally identifiable information you may be broadcasting.īut it doesn't end there. While TOR makes it hard to discover who is doing something, it's very easy for exit nodes to protocol what is being done.
The Firefox vulnerability was only the tip of the iceberg.
0 kommentar(er)
