[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-dev] Tor Geolocating exit nodes.




So Griffin Boyce is canvasing for some input to improve Tor, specifially for Journalists.
https://twitter.com/abditum/status/479052228138119168

1. It is known that various actors are trying to compromise Tor comms by establishing
own exit nodes. With enough nodes, they can break Tor (see slides).

2. Idea: Is it possible to allow the end user to determine the geo-location (with various degrees of fine tuning from hemisphere, through continental, to top country domain to regional?
(I have NFI about the inner workings of TOR protocol and new work on it)

For example. Say a journalist in Russia is using Tor, s/he declares in their tor client, that they only want to use exit nodes in South America and Australia. Thus minimising the chance the nodes are owned.

This geolocation could perhaps be used to validate the integrity of the nodes (how I dont know, maybe by establishing TOR honeypots that can only be compromised through traffic through a compromised (owned) exit node).

Risk:
This is a rats nest, because if implemented incorrectly it may allow hostile actors to direct exit nodes to those that are owned.

Thanks for reading my fiction. Maybe its useful in the light of what Griffin is asking about.


--
JP Wulf
Problem Solution Engineering
http://nomeonastiq.com/
_______________________________________________
tor-dev mailing list
tor-dev@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev