Most of us like to think the Tor Project offers perfect anonymity online. And certainly not subject to FBI hacking.
Imagine the surprise when the headline reads: Alleged operator of Silk Road 2.0 busted, charged in NYC by Lisa Vaas. That is just so not cool. Is there some problem with Tor?
Relax! So far as is known, nothing is wrong with Tor. The problem? Internal security.
This time around, to get hold of whomever owned and operated Silk Road 2.0, a Homeland Security Investigations (HSI) agent tried a different tactic: he or she got onto Silk Road 2.0’s support staff.
The undercover agent got access to private, restricted areas of the site reserved for Benthall and his administrators.
Ouch!
Someone wasn’t paying attention to internal security. Andrea Heuer points out there are internal security breaches over 2560 times a day. (Over 2,560 Internal Security Breaches Occurred In US Businesses Every Day)
Consider replacing missing walls before buying expensive locks for the doors.
The braggadocious claims of the FBI:
Let’s be clear – this Silk Road, in whatever form, is the road to prison. Those looking to follow in the footsteps of alleged cybercriminals should understand that we will return as many times as necessary to shut down noxious online criminal bazaars. We don’t get tired.
makes you wonder how many of the participants in Silk Road 2.0 will be prosecuted? Unless Tor has defeated the FBI’s efforts to trace the buyers and sellers.
If you hear of FBI prosecution of buyers or sellers from Silk Road 2.0, please drop me a note. Thanks!
Update: The truth behind Tor’s confidence crisis by Patrick Howell O’Neill.
Patrick sheds light to dispel the smoke being spread by law enforcement about Tor security. Bad security practices appear to be the reason why Dark Net sites have fallen. The largest sites continue without interruption. No security is absolute but certainly not without basic security practices (Don’t say “I am the darklord and live at NNN MainStreet, Commontown, USA.” on social media if “darklord” is your handle on a Tor network. OK? Just don’t do it.)