
"...it isn't hard to use relays such as Tor to effectively browse from a point overseas....
No machinery under the UK government's control needs to see anything other than a stream of encrypted traffic in order for a user located in Britain to merrily enter hardcore terrorist chatrooms, download bomb-making instructions, coordinate operations and all the rest."
Not necessarily, according to Steve Topletz (of Torpark/Xerobank) on the Wilders Security forum. ( http://tinyurl.com/yo2dhq )
Originally Posted by caspian:
"I don't understand how they could tell who someone is or where they live by analyzing traffic coming from Tor. If tor does not even know your IP address at the exit point, how could analyzing traffic do so?"
Steve's answer:
"Because the ISP can see *who* your computer is talking to, and intelligence agencies have the internet tapped. They can see you visit website x, talking through tor node 3, talking through tor node 2, talking through tor node 1, talking to your computer. They can see who is talking to whom, and depending on your computer sending requests that get relaying through the network, they can follow the string right back to you because they are capable of observing the whole internet."
Originally Posted by caspian:
"I thought the XeroBank browser and the Vidalia bundle with privoxy prevented the ISP from knowing what websites you visit. I know that they can see that you connect to a Tor server, but I thought that it was impossible to see where it leaves Tor and where it goes from there."
Steve:
"It prevents your ISP from knowing what website YOU visit, but they know you are talking to Tor node 1. Tor node 1's ISP knows he is talking to Tor node 2 and so on. If all ISPs collude, or simply an intelligence agency can monitor all the ISPs, they can perform traffic analysis."
Originally Posted by caspian:
"Wow. I did not know that this was possible. But is this some kind of far fetched scenario that would be used under extreme circumstances......like for terrorists or something? It seems awfully involved and complicated a technique to employ just for some minor legal violoation, like downling music. I mean there are all kinds of internet scams that no one seems to be able to track or resolve. Identity theft seems to be rampant and I have NEVER heard of any of these thieves being tracked this way. Could traffic analysis be done with XeroBank? And if so, who would be capable of this and for what reasons would they go to such trouble?"
Steve:
"Powerful governments (US/UK/China) have this ability, as do super telecoms such as UUNet, QWEST and AT&T. This can be done with pretty much any low-latency anonymity network. This is why I say there is a tipping point, those who are less than a superpower don't have the capability, those who are don't need to bust your encryption to bust your identity and traffic."