« first day (4309 days earlier)      last day (570 days later) » 

Fire Quacker
Fire Quacker
1:43 PM
@CaffeineAddiction And that is why pentesters have jobs... except this company doesn't seem to budget for that, so :/
 
 
10 hours later…
forest
forest
11:21 PM
tl;dr The CEO of a company that was selling spying services to death squads in 3rd world countries and boasting that they can access >10% of the internet's NetFlow records and sell them is finally no longer on the Tor Project board of directors.
Although a lot of people have the wrong idea. I saw a Reddit thread titled:
> The CEO of Team Cymru, "Rabbi Rob Thomas" sells a tool to governments that "monitors 94% of all internet traffic", collecting pcaps of everything. This same guy is at the BOARD OF DIRECTORS of The Tor Project.
He sells NetFlow data, not pcaps. They are very, very different things.
Not even the NSA has access to 94% of the internet in terms of raw packets. But 94% of flow records? Surprising and disturbing, but possible (and apparently practical).
From the blog post:
> Like all hardware that the Tor Project uses, we cannot guarantee perfect security when there is physical access, so we operate from a position of mistrust and rely on cryptographically verifiable reproducibility of our code to keep our users safe. As we would with machines hosted anywhere, the machines hosted at Cymru were cleanly installed using full disk encryption.
> This means that the set up with Team Cymru was not different from any other provider we would be using. So the level of risk for our users was the same when we used other providers.
I'm not sure what they're trying to say... Is TPO implying that FDE mitigates threats from malicious hardware?
Because that's wrong.
 

« first day (4309 days earlier)      last day (570 days later) »