Tor Compromised

Looks like (as usual) no flash, no problem, as this hack exploits flash's ignorance of proxies to cause a direct phone-home.

Tor is working as advertised. Flash just can't be made to use the proxy. The title should be "flash exploited to compromise privacy". But that would pretty much describe all articles about flash.

The headline is completely inaccurate, and demonstrates the submitter didn't understand the article. Namank, please flog yourself before ever submitting again.

I used to have a crazy setup that caused network traffic of my criteria to be pulled off the wire and sent over Tor.

It used iptables' MARK target and source routing to select the PPP interface. The pppd talked to a slirp (http://slirp.sourceforge.net/); Slirp takes TCP packets and attempts to emulate their effect using regular UNIX socket calls.

Slirp being wrapped in tsocks and Tor, resulted in the desired TCP connections actually occurring over Tor. As for DNS, that could be handled transparently using the same approach, although I never got around to this.

This was all totally transparent to any machines living behind the router.

While a bit contrived, this setup could easily be replicated on either a OpenWRT router, or possibly even a new style of Tor client program, which acted more like a real network interface on the user's machine.

A client configuration like that wouldn't suffer from the problem described in this article.

Flagging for an inaccurate and sensationalist headline.

The whole thing is actually 5 years old, look at the date above...

The actual paper: http://dl.packetstormsecurity.net/0610-advisories/Practical_...