OpenTube

how 4 Tor users were deanonymized

Daniel Boctor

662,652 views

An alliance of intelligence agencies, apart of the 14 eyes alliance, banded together in order to deanonymize and arrest several users of the Tor browser, who were admins for the website boystown, being hosted on the Tor network as a Tor hidden service (now called an onion service). This attack involved a guard discovery attack where the feds, such as the FBI, were able to find the true IP address of a specific Tor relay known as the exit node. Whether you're a pen tester, security researcher, or cyber security expert, I hope you'll find this attack as fascinating as I did.

JOIN THE DISCORD! 👉 Discord: discord

Sources:
https://www.taipeitimes.com/News/worl...
https://de.wikipedia.org/wiki/Boystown
https://en.wikipedia.org/wiki/Boystow...)
https://www.malwarebytes.com/blog/new...
https://www.packetlabs.net/posts/germ...
https://www.sueddeutsche.de/panorama/...
Reddit: operation_liberty_lane_le_running_gaurd_and
https://blog.torproject.org/tor-is-st...
https://www.bka.de/DE/Presse/Listense...
https://github.com/ricochet-im/ricochet
https://www.dw.com/de/daniel-mo%C3%9F...
https://metrics.torproject.org/rs.htm...

0:00 – Intro
1:57 – Operation Liberty lane
3:58 – Internet traffic
5:19 – Onion routing
8:30 – Guard discovery attack
12:15 – Vanguards
13:32 – Ricochet
14:36 – Closing

MUSIC CREDITS:
LEMMiNO - Cipher
LEMMiNO - Cipher (BGM)
CC BY-SA 4.0

LEMMiNO - Firecracker
LEMMiNO - Firecracker (BGM)
CC BY-SA 4.0

LEMMiNO - Nocturnal
LEMMiNO - Nocturnal (BGM)
CC BY-SA 4.0

LEMMiNO - Siberian
LEMMiNO - Siberian (BGM)
CC BY-SA 4.0

#software #computerscience #code #hacking #cybersecurity #exploit #vulnerability #pentesting #privacy #malware #cyber #cybersecurity #backdoor #hacked #NSA #cyberattack #FBI #CIA #tor #torbrowser #onionservice #onionrouting #torhiddenservice #deanonymize #14eyes #anonymous #darknet #torrelay

20 Comments

@davidrosales1672 7 months ago

All this work to expose some randos and the elite can get away with everything in the files

@betos-08 1 year ago

Don't treat anything like you're 100% safe. Glad they got bad people, the same methods could be used just as easily against people like whistleblowers.

@PaddyWagon-l6p4r 1 year ago

This was just a test run. These agencies develop these tools and techniques and test them against abusers, which is why these men got relatively low sentences. The end goal is not to remove sick content, governments could care less. The end goal is to develop these tools and techniques to be used against disidents and political rivals.

@thugglifeprettyboi 11 months ago

sudo apt install opsec

@doz3r_420 1 year ago

it burns when ip

@HmmmBlyat 9 months ago

in conclusion: The Government owns the largest Vault of Digital and Physical Cheeze Pizza on earth

@aplcc323 8 months ago

The guy who had 3000+ posts on a CSAM site was sentenced to 7 years???? That is not enough.

@scottvertical398 2 months ago

CORRECTION: 0:00 - It was NOT a beautiful morning in Munich on April 14th 2021, the day was characterized by light snow showers, rain, and intermittent cloud cover. The temperature was notably cold, with a daytime high reaching roughly 10° C (50° F) and overnight lows dropping to near freezing.

@Kyrokotei 1 year ago

Fun fact: Telefonica is actually Spanish, not German. You could be confused with their German Subbrand, O2 Deutschland

@salomon8286 7 months ago

By the way Mullvad vpn was raided by the feds and not even the owner could decrypt the information

@JohnDoe11830 9 months ago

THE FUCKING IRONY OF THE SITE BEING NAMED AFTER A FOSTER CARE GROUP FROM MICHIGAN THAT TRAFFICKED KIDS THAT THE FBI COVERED UP IS INSANE

@j-twd930 1 year ago

Mental Outlaw video title lol

@abraham7330 4 months ago (edited)

so they get 12 years but if you sell drugs they give you life? crazy

@koolkidkav 2 months ago

I was bracing so hard for the segway into a VPN ad 😂

@CiscoZero 1 year ago

“Yet it may be roundly asserted that human ingenuity cannot concoct a cipher which human ingenuity cannot resolve.”
— Edgar Allan Poe, The Gold-Bug

@ronaldpikksaar2202 1 year ago

Not just Tor, but internet in general can't be considered safe. You can jump through hoops to make it bit safer but you should really know what you are doing. Never use your home connection for start. Never take your phone with you when going to use net. Keep your device in Faraday cage whenever you are not using it. Etc.

@tequilasunset6104 1 year ago

Mad combination of an interesting piece of information + charismatic author. Thanks for your content. I will stay here for more.

@cd5433 1 year ago

I’m happy they got the owner of a CSAM site but they can do this to literally anyone on TOR

@bsctchrz 1 year ago

Munich, Germany: Showing Castle of Schwerin

@thirdeye4654 1 year ago

There is something weird about the explanation, since hidden services are not directly connected to a user's exit node. If that would be the case, it's not really hidden (since you would know the IP of the website your are connecting to). Instead a hidden service is also connected via 3 nodes to a common rendezvous point. So a user connects via 6 nodes to reach a hidden service.