[tor-talk] FBI cracked Tor security

[Karsten N.]

Am 14.07.2016 um 02:02 schrieb Sci Fith:
> Sources? Links? Otherwise why conjecture & possibilities?

2013 FBI and Freedom Hosting:
http://www.wired.com/threatlevel/2013/09/freedom-hosting-fbi/

2015 FBI operation "Playpen"
https://motherboard.vice.com/read/the-fbis-unprecedented-hacking-campaign-targeted-over-a-thousand-computers

In both cases, the FBI took over the Tor onion sites platform and
deployed a network investigative technique on the Tor hidden service
sites - the agency's term for a hacking tool. That tool used a
vulnerability to circumvent the protections of the Tor Browser Bundle,
and then installed a trojan, which grabbed the suspect's IP address and
system information.


>> But one clue might be that the FBI can read Bugzilla posts for whichever browser Tor uses (Firefox now) 

For operation "Playpen" an own new 0-day exploit was used by FBI.
Mozilla and TorProject tried to get informations about the bug,

https://blog.mozilla.org/blog/2016/05/11/advanced-disclosure-needed-to-keep-users-secure/

But the bug was classified by FBI because of "National Security".

https://motherboard.vice.com/read/the-fbi-is-classifying-its-tor-browser-exploit

Best regards
Karsten N.