Putin: Crack Tor for me and I'll make you a MILLIONAIRE

[Fi8sVrs]

Russian Interior Ministry offers big pile o' roubles for busting pro-privacy browser

Russia's Interior Ministry has posted a tender seeking parties willing to “study the possibility of obtaining technical information about users (user equipment) TOR anonymous network".

The tender appears to be open only to organisations rated to do secret work for the Russian government, but concluding that means the project has political aims may not be sensible.

The local Pirate Party told Global Voices they think the project's origin in the Interior Ministry, rather than a military or intelligence agency, is a sign that pornography is the tender's real target.

It's not unknown for governments to use agencies of convenience to get things done. Government agencies around the world are often terrible at sharing information and assets, as shown by the current push for re-use of code in “government app stores”.

So perhaps this really is the Interior Ministry acting without thought to Russia's less-than-encouraging attitude to political views which are at variance with the ruling party's.

Whatever the aim of the project, there's 3,900,000 roubles - $US 111,000 or £65,500 - up for grabs. ®

Via Putin: Crack Tor for me and I'll make you a MILLIONAIRE • The Register

[Ganav]

TOR nu poate fi crack-uit la nivel criptografic. Cu toate ca in 2013 s-au descoperit noi tehnici de factorizare a numerelor prime(foarte utile in gasirea perechilor de chei publice/private RSA) efortul computational necesar inca este ridicat. Daca ai suficiente resurse ai putea efectiv "convinge" proprietarii respectivelor statii sa iti ofere acces la acestea sau chiar sa iti creezi propria retea de exit node-uri si sa monitorizezi tot traficul care iese din aceasta. De acolo poti descoperii nodurile la o adancime de nivel unu si tot asa poti cunoaste tot mai mult din reteaua TOR. Daca detii exit node-uri poti aplica atacuri de tip MITM pentru a intercepta si decripta trafic criptat(de ex. SSH; cand te conectezi la un o statie clientul ssh te intreaba daca cheia publica este valida in cazul in care autenticarea se face pe baza utilizator parola). In TOR fiecare nod cunoaste nodurile imediat adiacente(adresa IP a acestora mai exact).