[tor-talk] isp monitoring tor

Mirimir mirimir at riseup.net
Mon Oct 6 22:31:51 UTC 2014


On 10/06/2014 04:06 PM, garyr22 at Safe-mail.net wrote:
> Sure, I understand what you mean. I'm assuming a situation that
> doesn't involve legal issues. This would be illegal surveillance,
> using average resources with your ISP supporting it for some reason.
> I think Tor would be able to handle this type surveillance if used
> correctly.
> 
> I would like to know what their procedure would be outside of
> monitoring ExitNodes. How much effort it would be to examine the
> packets and get any useful information.

Tor is vulnerable to two general sorts of attacks. One involves the use
of malicious relays in various ways to deanonymize circuits. The other
involves the use of traffic analysis to correlate traffic captured at
edges of the Tor network (to users and the websites that they access).

With ISPs, there's the risk that some organization can monitor traffic
on both ends. It's common to characterize such organizations as "global
passive adversaries". However, a single ISP (or a firm owning multiple
ISPs) could do that, if it provides service to both users and websites.
Also, users who access websites in their own nation via Tor are
similarly vulnerable to their government.

> Thanks
> 
> -------- Original Message -------- From: Crypto <crypto at jpunix.net> 
> Apparently from: tor-talk-bounces at lists.torproject.org To:
> tor-talk at lists.torproject.org Subject: Re: [tor-talk] isp monitoring
> tor Date: Mon, 06 Oct 2014 13:58:10 -0500
> 
>> 
>> 
>> On 10/6/2014 1:51 PM, garyr22 at Safe-mail.net wrote:
>>> Hi,
>>> 
>>> How difficult would it be for an ISP to monitor your Tor activity
>>> from the modem and determine what sites you visit?
>>> 
>>> I only need to know if it would be very hard, impossible, or very
>>> possible to do. If it's possible what technique would they use?
>>> 
>>> 
>>> Thanks
>>> 
>> 
>> Gee... That's a tough question. How hard is it to catch the flu?
>> How hard is it to get hit by a car? It depends on who your ISP is,
>> what is specified in their TOS, what monitoring equipment is
>> located at the particular node they are connected to, what the
>> courts have authorized them to monitor, how interested they are in
>> investing the time and money in monitoring you, etc.
>> 
>> -- Crypto https://www.digitalocean.com/?refcode=b90b690ca5bb
>> 
>> -- tor-talk mailing list - tor-talk at lists.torproject.org To
>> unsubscribe or change other settings go to 
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


More information about the tor-talk mailing list