[tor-talk] misleading advice in Ars Technica article about patched binaries

[Matthew Finkel]

On Mon, Nov 17, 2014 at 07:16:58AM +0000, wyory wrote:
> Hello Tor friends:
> 
> AN article on Ars Technica about the malicious exit nodes contains some
> misleading advice attributed to "Tor officials."
> 
> From end of article: "Tor officials have long counseled people to employ
> a VPN when using the privacy service, and OnionDuke provides a strong
> cautionary tale when users fail to heed that advice."
> 
> http://arstechnica.com/security/2014/11/for-a-year-one-rogue-tor-node-added-malware-to-windows-executables/

Thanks wyory. A new week, a new Tor headline. Happy Monday.

> 
> Maybe the article was supposed to read "HTTPS" instead of "VPN". Or,
> "verify binaries" instead of "employ a VPN."
> 
> Could a real "Tor official" contact the author and ask for a correction?

Probably a good idea. VPNs are useful, sometimes, but not very often and
definitely not for most use-cases.


- Matt