Hacker News Reader

Comment by e12e | Hacker News Reader

I wonder how large percentage of tor exit nodes (and nodes in general) are operated by intelligence agencies? I remember reading that the various agencies across Europe were active in setting up and running mixmaster remailers -- and the (stated) purpose of TOR is to be a viable covert communication channel for spies.

Remember that a "node run by the CIA", can just mean that the ph.d. student that required some resources from the IT department has a handler. Said student might even think the thing isn't monitored -- although I suspect it would be easier to to involve the admin, then keep him/her in the dark.

View on HN

I think the solution to this problem probably doesn't involve trying to track down these bad nodes. Rather, more people should host Tor nodes, so as to reduce the chance of someone connecting to a bad one. As big as intelligence agencies are, they cannot operate too many nodes easily - the more nodes they operate, the bigger the chance that someone notices suspicious activity going on. On the other hand, there are a lot more civilians who can host Tor nodes without it being suspicious, thus dealing with the threat of intelligence agencies.

I'm curious about what the exact ratios would be, if there were a way to find this out (probably not).

How would you go about hosting a Tor node, without exposing yourself to problems like this? http://raided4tor.cryto.net/

I've thought about running an exit node, but I'm not willing to sacrifice my own safety and freedom to do it. The only solution seems to be buying hosting anonymously (bitcoins?), and making sure you only log in to the server over Tor.

FWIW I think one is helping the Tor network even if they decide to only run an internal Tor node (not an exit). I believe Tor hidden services might become more popular in the months to come, and a lot of resources that the users were initially trying to access anonymously are / will be reachable as hidden services (e.g. wikileaks).

I run an exit node in Egypt on a server from CityNet Host [1], that I got on a promo. Pumping 400 Gb/m through it for $2.50 a month. I would not host one at home but Egypt seems far enough.

[1] http://citynethost.com/vps.asp

Note: You link to the VPS page, but looks like the "Shared Hosting" is where the $2.95/mo package is, and it says it only comes w/ 50GB of bandwidth.

I got my VPS on a promotion, so it really is $2.50 though it looks like you can't get the same deal anymore. http://lowendbox.com has plenty of these, including $15/year deals from BuyVM.

A sybill attack on Tor is probably the least efficient attack. It'd be far easier to perform a correlation attack if you know the probable endpoints, or compromise the target's computer (if you only know the source).

I'm sure government agencies run Tor exits, which means they'll see the middleman node's IP addresses and whatever traffic the originator sent (usually HTTPS). They can't do much with that.

Reply on news.ycombinator.com