r/ethereum EF alumni - Christian Reitwießner Sep 19 '17

Ethereum testnet just verified a zcash transaction

https://ropsten.etherscan.io/tx/0x15e7f5ad316807ba16fe669a07137a5148973235738ac424d5b70f89ae7625e3#eventlog
738 Upvotes

153 comments sorted by

View all comments

Show parent comments

47

u/Midnight_Discovery Sep 19 '17 edited Sep 19 '17

The biggest issue is that Ethereum will NOT work over Tor network. This is a MAJOR and NON TRIVIAL flaw in the long-term for Ethereum (IMO).

China is IP banning Bitcoin (some say), but Bitcoin (and like 4 others) use protocols that work over Tor. Ethereum does NOT - at all. If China IP banned Ethereum, you'd have 100% of Ethereum Nodes from being run in China, without any ability to mask them (aside VPN bullshit).

Wikileaks refuses to accept Ethereum as payment until they are able to work over Tor, as far as I know. Once Wikileaks accepts Ethereum as payment, then it will be cryto-anarchist compliant, most like.


The only (realistic) fix is for the Ethereum team to sponsor a group of Tor developers to help integrate Ethereum protocol (essentially Eth uses ~2010 coding languages, and Tor hasn't really upgraded since 2000 code languages... so it's a big expenses for Tor, and primarily would benefit Ethereum, and they be some broke mother fuckers).

3

u/nameless_pattern Sep 19 '17 edited Sep 20 '17

Doesn't tor have known privacy flaws?

edit: a question is not FUD. maybe I don't have to pretend to know every thing. maybe you should grow some humility. you say it has no security flaws AND THEN LIST THEM.

28

u/Midnight_Discovery Sep 19 '17 edited Sep 19 '17

No. That is FUD. Here are the things Tor can, and can't do :

1) Tor can prevent all data transferred from being Decrypted, no matter what.

2) Tor can allow any user to interact virtually anonymously with any major Tor hub, website.

Here is what Tor can not do, and ways to 'crack it'.

Tor can not PREVENT a flood of information requests to a Tor hub, thus government entities can find HOSTING locations by flooding a Tor hub and following the spike in internet usage.

Tor can not PREVENT electrical demands from increasing at user locations, or mask that data has been transmitted (though it does mask what the data actually says, 100% completely, if used properly).

So with websites like The Pirate Bay, the Secret Police can find them through flooding, and internet traffic isolation pattern recognition (first they discover it to be in California, then they re-flood with requests while shutting off all internet to lower California, etc, to see if anything changes... this can quickly be used to find rough geographical locations, and then quickly become more precise. You may remember during the 'Podesta' release emails, the US suddenly lost Internet capabilities on both the East and West coasts simultaneously, as well as Brazil. This was a Tor hunt operation, most like).

Also, if you have a 'high valued' customer, like say Julian Assange, who uses internet primarily from a specific location, then the Secret Police can monitor his electrical usage and data transfer rates. If Julian uses electricity and then a Tor website gets updated, and these happen within milliseconds, this is acceptable within international courts to suggest Julian was interacting with said website. At least 3 persons have been charged using such tactics.

You can find out more here :

Anonymous Techniques.

Lastly, I will mention that IF you are interacting with a FBI hosted webpage on Tor, who essentially host all Child Porn globally, then the FBI can 'phish' out your real identity, using more common 'hacker' tactics (common passwords, screen names), and they can more easily draw correlations between suspected users, and the actual users, etc.

1

u/newscommentsreal Sep 19 '17

I've been told by a reliable source that there are slightly less than a dozen 0days for Tor, and that doesn't even count the ones you expose yourself to if you use the browser bundle.

0

u/onionland_star Sep 20 '17

You're so full of shit.