mycofunguy

"Claiming anything else is useless conspiracy thinking without evidence."

Using the word "conspiracy" in this conversation about TOR is wild to me.

In a post-Snowden world, it surprises me how anyone wouldn't give reasonable doubt to the THE most interesting and juicy tool linked to the US military post-2001. The tool that people think hides what they are doing and hides who they are.

If there's one thing I know, it's that the US would never in a million years leave a data source untapped or a new NIST crypto standard untampered. Their fingers are in every pie.

Pretty on point with what I'm saying. I remember when Tor first launched and it was definitely framed at the time as for human rights. I absolutely believed all of that for years.

You yourself spoke with the founder about this?

What do you use the info you have gathered for? It seems comprehensive but curious as to how you use it?

I'd also like to see a source that proves "most of the nodes are hosted on American cloud infra."

I will make a correction. What I should have said is that out of the top 10 networks hosting relays or exit nodes, that close to half have an American presence and that the vast majority 80-90% of relays and exit nodes are spread out within 14 eyes countries - you can see it yourself when you look at the network. When was the last time you looked at where it was connected to and did not see a flag within either 5 eyes, 9 eyes or 14 eyes countries? While that maybe isn't the proof you want, it sure is a meaty coincidence and another reason on top of who funds it and what its purpose is for.

'Meh, and yet anyone can run a relay or onion service in a few clicks.' - of course.

'Just false.'

It depends where you are from. The US constitution is supposed to prevent spying on American citizens, but anyone outside of the USA is fair game. Most of the global population is not in the USA (like me).

'If your model is simply to avoid corporate surveillance and tracking its a fantastic defense.' - I host an onion service exactly for that reason, not for my own privacy but to let customers have that with us if they want.

'If your trying to go up against nation states, it never claimed to protect you from that.' - I disagree, it will protect an American spy a treat.

"The Tor Project’s mission is to advance human rights and freedoms." - I might be completely barking up the wrong tree here, but I thought the TOR mission was to allow spies to access the network and hide among all the other non-spy users.

It was and still is funded mostly by the US Naval Research Laboratory. And considering most of the nodes are hosted on American cloud infra, if those companies share with the US Govt in real-time what is connecting in and out then the entire chain can be figured out much of the time without any kind of timing attacks. The regular person using it doesn't get as much of the privacy benefits, but the charade is making it seem like they do.

I know lots of people really believe in TOR - fair play to them. I just know it in my bones it's not as it seems.

Is this your own video? Or have you been using the techniques discussed?

Answered above, thanks for the interest! Really appreciated.

Hi there, it's plain HTML with the basket living in the URL. Checkout and contact form are POST. There's a small Go backend (pledge/unveil) which saves the orders as encrypted json files (public key) with no private key stored on the server, then a program on my laptop which SSHes in to the VPS to collect the orders and delete the orders on the server multiple times a day - it's a passion project away from our bigger shop to try creating something more secure and private than wordpress/woo.

It intentionally runs like a guest order website, I think the only people so far who've really used it are the privacy geeks who also like mushroom spores and cultivation - niche clientele (but my kind of people).

Depending on how well this project goes, it's only a few days old - but it's taking orders, I'm hoping to move our main shop to a similar setup and running it from home because WP/Woo and even linux servers (I tend to use Debian) are giving me a lot of anxiety with the security situation. I fear that I worry about our customers data than even they do!

We're running a no-JS, no account, no cookies online shop for selling mushroom products. $5 a month VPS server, but takes hardly any resources so it works.

(OpenBSD)