TOR was created by spooks to hide spooks online

Politics, History, & 'Conspiracy'
User avatar
greenseed
Posts: 563
Joined: Wed Sep 10, 2014 3:17 pm
Reputation: 651

TOR was created by spooks to hide spooks online

Postby greenseed » Sun Mar 15, 2015 6:41 pm

http://pando.com/2014/07/16/tor-spooks/

Almost everyone involved in developing Tor was (or is) funded by the US government

BY YASHA LEVINE
ON JULY 16, 2014

tor-privacy-roger-dingledine-nsa-pentagon

“The United States government can’t simply run an anonymity system for everybody and then use it themselves only. Because then every time a connection came from it people would say, “Oh, it’s another CIA agent.” If those are the only people using the network.”

—Roger Dingledine, co-founder of the Tor Network, 2004

***

In early July, hacker Jacob Appelbaum and two other security experts published a blockbuster story in conjunction with the German press. They had obtained leaked top secret NSA documents and source code showing that the surveillance agency had targeted and potentially penetrated the Tor Network, a widely used privacy tool considered to be the holy grail of online anonymity.

Internet privacy activists and organizations reacted to the news with shock. For the past decade, they had been promoting Tor as a scrappy but extremely effective grassroots technology that can protect journalists, dissidents and whistleblowers from powerful government forces that want to track their every move online. It was supposed to be the best tool out there. Tor’s been an integral part of EFF’s “Surveillance Self-Defense” privacy toolkit. Edward Snowden is apparently a big fan, and so is Glenn Greenwald, who says it “allows people to surf without governments or secret services being able to monitor them.”

But the German exposé showed Tor providing the opposite of anonymity: it singled out users for total NSA surveillance, potentially sucking up and recording everything they did online.

To many in the privacy community, the NSA’s attack on Tor was tantamount to high treason: a fascist violation of a fundamental and sacred human right to privacy and free speech.

The Electronic Frontier Foundation believes Tor to be “essential to freedom of expression.” Appelbaum — a Wikileaks volunteer and Tor developer — considers volunteering for Tor to be a valiant act on par with Hemingway or Orwell “going to Spain to fight the Franco fascists” on the side of anarchist revolutionaries.

It’s a nice story, pitting scrappy techno-anarchists against the all-powerful US Imperial machine. But the facts about Tor are not as clear cut or simple as these folks make them out to be…

Let’s start with the basics: Tor was developed, built and financed by the US military-surveillance complex. Tor’s original — and current — purpose is to cloak the online identity of government agents and informants while they are in the field: gathering intelligence, setting up sting operations, giving human intelligence assets a way to report back to their handlers — that kind of thing. This information is out there, but it’s not very well known, and it’s certainly not emphasized by those who promote it.

Peek under Tor’s hood, and you quickly realize that just everybody involved in developing Tor technology has been and/or still is funded by the Pentagon or related arm of the US empire. That includes Roger Dingledine, who brought the technology to life under a series of military and federal government contracts. Dingledine even spent a summer working at the NSA.

If you read the fine print on Tor’s website, you’ll see that Tor is still very much in active use by the US government:

“A branch of the U.S. Navy uses Tor for open source intelligence gathering, and one of its teams used Tor while deployed in the Middle East recently. Law enforcement uses Tor for visiting or surveilling web sites without leaving government IP addresses in their web logs, and for security during sting operations.”

NSA? DoD? U.S. Navy? Police surveillance? What the hell is going on? How is it possible that a privacy tool was created by the same military and intelligence agencies that it’s supposed to guard us against? Is it a ruse? A sham? A honeytrap? Maybe I’m just being too paranoid…

Unfortunately, this is not a tinfoil hat conspiracy theory. It is cold hard fact.



Brief history of Tor

The origins of Tor go back to 1995, when military scientists at the Naval Research Laboratory began developing cloaking technology that would prevent someone’s activity on the Internet from being traced back to them. They called it “onion routing” — a method redirecting traffic into a parallel peer-to-peer network and bouncing it around randomly before sending it off to its final destination. The idea was to move it around so as to confuse and disconnect its origin and destination, and make it impossible for someone to observe who you are or where you’re going on the Internet.

Onion routing was like a hustler playing the three-card monte with your traffic: the guy trying to spy on you could watch it going under one card, but he never knew where it would come out.

The technology was funded by the Office of Naval Research and DARPA. Early development was spearheaded by Paul Syverson, Michael Reed and David Goldschlag — all military mathematicians and computer systems researchers working for the Naval Research Laboratory, sitting inside the massive Joint Base Anacostia-Bolling military base in Southeast Washington, D.C.

The original goal of onion routing wasn’t to protect privacy — or at least not in the way most people think of “privacy.” The goal was to allow intelligence and military personnel to work online undercover without fear of being unmasked by someone monitoring their Internet activity.

“As military grade communication devices increasingly depend on the public communications infrastructure, it is important to use that infrastructure in ways that are resistant to traffic analysis. It may also be useful to communicate anonymously, for example when gathering intelligence from public databases,” explained a 1997 paper outlining an early version of onion routing that was published in the Naval Research Labs Review.

In the 90s, as public Internet use and infrastructure grew and multiplied, spooks needed to figure out a way to hide their identity in plain sight online. An undercover spook sitting in a hotel room in a hostile country somewhere couldn’t simply dial up CIA.gov on his browser and log in — anyone sniffing his connection would know who he was. Nor could a military intel agent infiltrate a potential terrorist group masquerading as an online animal rights forum if he had to create an account and log in from an army base IP address.

That’s where onion routing came in. As Michael Reed, one of the inventors of onion routing, explained: providing cover for military and intelligence operations online was their primary objective; everything else was secondary:

The original *QUESTION* posed that led to the invention of Onion Routing was, “Can we build a system that allows for bi-directional communications over the Internet where the source and destination cannot be determined by a mid-point?” The *PURPOSE* was for DoD / Intelligence usage (open source intelligence gathering, covering of forward deployed assets, whatever). Not helping dissidents in repressive countries. Not assisting criminals in covering their electronic tracks. Not helping bit-torrent users avoid MPAA/RIAA prosecution. Not giving a 10 year old a way to bypass an anti-porn filter. Of course, we knew those would be other unavoidable uses for the technology, but that was immaterial to the problem at hand we were trying to solve (and if those uses were going to give us more cover traffic to better hide what we wanted to use the network for, all the better…I once told a flag officer that much to his chagrin).

Apparently solving this problem wasn’t very easy. Onion router research progressed slowly, with several versions developed and discarded. But in 2002, seven years after it began, the project moved into a different and more active phase. Paul Syverson from the Naval Research Laboratory stayed on the project, but two new guys fresh outta MIT grad school came on board: Roger Dingledine and Nick Mathewson. They were not formally employed by Naval Labs, but were on contract from DARPA and the U.S. Naval Research Laboratory’s Center for High Assurance Computer Systems. For the next several years, the three of them worked on a newer version of onion routing that would later become known as Tor.

Very early on, researchers understood that just designing a system that only technically anonymizes traffic is not enough — not if the system is used exclusively by military and intelligence. In order to cloak spooks better, Tor needed to be used by a diverse group of people: Activists, students, corporate researchers, soccer moms, journalists, drug dealers, hackers, child pornographers, foreign agents, terrorists — the more diverse the group that spooks could hide in the crowd in plain sight.

Tor also needed to be moved off site and disassociated from Naval research. As Syverson told Bloomberg in January 2014: “If you have a system that’s only a Navy system, anything popping out of it is obviously from the Navy. You need to have a network that carries traffic for other people as well.”

Dingledine said the same thing a decade earlier at the 2004 Wizards of OS conference in Germany:

“The United States government can’t simply run an anonymity system for everybody and then use it themselves only. Because then every time a connection came from it people would say, ‘Oh, it’s another CIA agent.’ If those are the only people using the network.”

The consumer version of Tor would be marketed to everyone and — equally important — would eventually allow anyone to run a Tor node/relay, even from their desktop computer. The idea was to create a massive crowdsourced torrent-style network made up from thousands of volunteers all across the world.

At the very end of 2004, with Tor technology finally ready for deployment, the US Navy cut most of its Tor funding, released it under an open source license and, oddly, the project was handed over to the Electronic Frontier Foundation.

“We funded Roger Dingledine and Nick Mathewson to work on Tor for a single year from November 2004 through October 2005 for $180,000. We then served as a fiscal sponsor for the project until they got their 501(c)(3) status over the next year or two. During that time, we took in less than $50,000 for the project,” EFF’s Dave Maass told me by email.

In a December 2004 press release announcing its support for Tor, EFF curiously failed to mention that this anonymity tool was developed primarily for military and intelligence use. Instead, it focused purely on Tor’s ability to protect free speech from oppressive regimes in the Internet age.

“The Tor project is a perfect fit for EFF, because one of our primary goals is to protect the privacy and anonymity of Internet users. Tor can help people exercise their First Amendment right to free, anonymous speech online,” said EFF’s Technology Manager Chris Palmer.

Later on, EFF’s online materials began mentioning that Tor had been developed by the Naval Research Lab, but played down the connection, explaining that it was “in the past.” Meanwhile the organization kept boosting and promoting Tor as a powerful privacy tool:

“Your traffic is safer when you use Tor.”



Playing down Tor’s ties to the military…

The people at EFF weren’t the only ones minimizing Tor’s ties to the military.

In 2005, Wired published what might have been the first major profile of Tor technology. The article was written by Kim Zetter, and headlined: “Tor Torches Online Tracking.” Although Zetter was a bit critical of Tor, she made it seem like the anonymity technology had been handed over by the military with no strings attached to “two Boston-based programmers” — Dingledine and Nick Mathewson, who had completely rebuilt the product and ran it independently.

Dingledine and Mathewson might have been based in Boston, but they — and Tor — were hardly independent.

At the time that the Wired article went to press in 2005, both had been on the Pentagon payroll for at least three years. And they would continue to be on the federal government’s payroll for at least another seven years.

In fact, in 2004, at the Wizards of OS conference in Germany, Dingledine proudly announced that he was building spy craft tech on the government payroll:

“I forgot to mention earlier something that will make you look at me in a new light. I contract for the United States Government to built anonymity technology for them and deploy it. They don’t think of it as anonymity technology, although we use that term. They think of it as security technology. They need these technologies so they can research people they are interested in, so they can have anonymous tip lines, so that they can buy things from people without other countries knowing what they are buying, how much they are buying and where it is going, that sort of thing.”

Government support kept rolling in well after that.

In 2006, Tor research was funded was through a no-bid federal contract awarded to Dingledine’s consulting company, Moria Labs. And starting in 2007, the Pentagon cash came directly through the Tor Project itself — thanks to the fact that Team Tor finally left EFF and registered its own independent 501(c)(3) non-profit.

How dependent was — and is — Tor on support from federal government agencies like the Pentagon?

In 2007, it appears that all of Tor’s funding came from the federal government via two grants. A quarter million came from the International Broadcasting Bureau (IBB), a CIA spinoff that now operates under the Broadcasting Board of Governors. IBB runs Voice of America and Radio Marti, a propaganda outfit aimed at subverting Cuba’s communist regime. The CIA supposedly cut IBB financing in the 1970s after its ties to Cold War propaganda arms like Radio Free Europe were exposed.

The second chunk of cash — just under $100,000 — came from Internews, an NGO aimed at funding and training dissident and activists abroad. Tor’s subsequent tax filings show that grants from Internews were in fact conduits for “pass through” grants from the US State Department.

In 2008, Tor got $527,000 again from IBB and Internews, which meant that 90% of its funding came U.S. government sources that year.

In 2009, the federal government provided just over $900,000, or about 90% of the funding. Part of that cash came through a $632,189 federal grant from the State Department, described in tax filings as a “Pass-Through from Internews Network International.” Another $270,000 came via the CIA-spinoff IBB. The Swedish government gave $38,000, while Google gave a minuscule $29,000.

Most of that government cash went out in the form of salaries to Tor administrators and developers. Tor co-founders Dingledine and Mathewson made $120,000. Jacob Appelbaum, the rock star hacker, Wikileaks volunteer and Tor developer, made $96,000.

In 2010, the State Department upped its grant to $913,000 and IBB gave $180,000 — which added up to nearly $1 million out of a total of $1.3 million total funds listed on tax filings that year. Again, a good chunk of that went out as salaries to Tor developers and managers.

In 2011, IBB gave $150,00, while another $730,000 came via Pentagon and State Department grants, which represented more than 70% of the grants that year. (Although based on tax filings, government contracts added up to nearly 100% of Tor’s funding.)

The DoD grant was passed through the Stanford Research Institute, a cutting edge Cold War military-intel outfit. The Pentagon-SRI grant to Tor was given this description: “Basic and Applied Research and Development in Areas Relating to the Navy Command, Control, Communications, Computers, Intelligence, Surveillance, and Reconnaissance.”

That year, a new government funder came the scene: Swedish International Development Cooperation Agency (SIDA), Sweden’s version of USAID, gave Tor $279,000.

In 2012, Tor nearly doubled its budget, taking in $2.2 million from Pentagon and intel-connected grants: $876,099 came from the DoD, $353,000 from the State Department, $387,800 from IBB.

That same year, Tor lined up an unknown amount funding from the Broadcasting Board of Governors to finance fast exit nodes.



Tor at the NSA?

In 2013, the Washington Post revealed that the NSA had figured out various ways of unmasking and penetrating the anonymity of the Tor Network.

Since 2006, according to a 49-page research paper titled simply “Tor,” the agency has worked on several methods that, if successful, would allow the NSA to uncloak anonymous traffic on a “wide scale” — effectively by watching communications as they enter and exit the Tor system, rather than trying to follow them inside. One type of attack, for example, would identify users by minute differences in the clock times on their computers.

The evidence came out of Edward Snowden’s NSA leaks. It appeared that the surveillance agency had developed several techniques to get at Tor. One of the documents explained that the NSA “pretty much guaranteed to succeed.”

Snowden’s leaks revealed another interesting detail: In 2007, Dingledine gave at a talk at the NSA’s HQ explaining Tor, and how it worked.

The Washington Post published the NSA’s notes from their meeting with Dingledine. They showed that Dingledine and the NSA mostly talked about the technical details of Tor — how the network works and some of its security/usability tradeoffs. The NSA was curious about “Tor’s customers,” and Dingledine ran down some of the types of people who could benefit from Tor: Blogger Alice, 8 yr. old Alice, Sick Alice, Consumer Alice, Oppressed Alice, Business Alice, Law Enforcement Alice…

Interestingly, Dingledine told the NSA that “the way TOR is spun is dependent on who the ‘spinee’ is” — meaning that he markets Tor technology in different ways to different people?

Interestingly, the Washington Post article described Dingledine’s trip to the NSA as “a wary encounter, akin to mutual intelligence gathering, between a spy agency and a man who built tools to ward off electronic surveillance.” Dingledine told the paper that he came away from that meeting with the feeling that the NSA was trying to hack the Tor network:

“As he spoke to the NSA, Dingledine said in an interview Friday, he suspected the agency was attempting to break into Tor, which is used by millions of people around the world to shield their identities.”

Dingledine may very well have been antagonistic during his meeting with the NSA. Perhaps he was protective over his Tor baby, and didn’t want its original inventors and sponsors in the US government taking it back. But whatever the reason, the antagonism was not likely borne out of some sort of innate ideological hostility towards the US national security state.

Aside from being on the DoD payroll, Dingledine has spends a considerable amount of his time meeting and consulting with military, intelligence and law enforcement agencies to explain why Tor’s so great, and instructing them on how to use it. What kind of agencies does he meet with? The FBI, CIA and DOJ are just a few… And if you listen to Dingledine explain these encounters in some of his public appearances, one does not detect so much as a whiff of antagonism towards intelligence and law enforcement agencies.

In 2013, during a talk at UC San Diego, Dingledine cheerfully recalled how an exuberant FBI agent rushed up to thank him during his recent trip to the FBI:

“So I’ve been doing a lot of talks lately for law enforcement. And pretty much every talk I do these days, sone FBI person comes up to me afterwards and says, ‘I use Tor everyday for my job. Thank you.’ Another example is anonymous tips — I was talking to the folks who run the CIA anonymous tip line. It’s called the Iraqi Rewards Program…”

Dingledine’s close collaboration with law enforcement aside, there’s the strangely glib manner in which he dismissed news about the NSA hacking into Tor. He seemed totally unconcerned by the evidence revealed by Snowden’s leaks, and played down the NSA’s capabilities in his comments to the Washington Post:

“If those documents actually represent what they can do, they are not as big an adversary as I thought.”

I reached out to Dingledine to ask him about his trip to the NSA and whether he warned the Tor community back in 2007 that he suspected the NSA was targeting Tor users. He didn’t respond.



How safe is Tor, really?

If Dingledine didn’t appear to be fazed by evidence of the NSA’s attack on Tor anonymity, it’s strange considering that an attack by a powerful government entity has been known to be one Tor’s principle weaknesses for quite some time.

In a 2011 discussion on Tor’s official listserv, Tor developer Mike Perry admitted that Tor might not be very effective against powerful, organized “adversaries” (aka governments) that are capable monitoring huge swaths of the Internet.

“Extremely well funded adversaries that are able to observe large portions of the Internet can probably break aspects of Tor and may be able to deanonymize users. This is why the core tor program currently has a version number of 0.2.x and comes with a warning that it is not to be used for “strong anonymity”. (Though I personally don’t believe any adversary can reliably deanonymize *all* tor users . . . but attacks on anonymity are subtle and cumulative in nature).

Indeed, just last year, Syverson was part of a research team that pretty much proved that Tor can no longer be expected to protect users over the long term.

“Tor is known to be insecure against an adversary that can observe a user’s traffic entering and exiting the anonymity network. Quite simple and efficient techniques can correlate traffic at these separate locations by taking advantage of identifying traffic patterns. As a result, the user and his destination may be identified, completely subverting the protocol’s security goals.”

The researchers concluded: “These results are somewhat gloomy for the current security of the Tor network.”

While Syverson indicated that some of the security issues identified by this research have been addressed in recent Tor versions, the findings only added to a growing list of other research and anecdotal evidence showing Tor’s not as safe as its boosters want you to think — especially when pitted against determined intelligence agencies.

Case-in-point: In December 2013, a 20-year-old Harvard panicked overachiever named Edlo Kim learned just how little protection Tor offered for would be terrorists.

To avoid taking a final exam he wasn’t prepared for, Kim hit up on the idea of sending in a fake bomb threat. То cover his tracks, he used Tor, supposedly the best anonymity service the web had to offer. But it did little mask his identity from a determined Uncle Sam. A joint investigation, which involved the FBI, the Secret Service and local police, was able to track the fake bomb threat right back to Kim — in less than 24 hours.

As the FBI complaint explained, “Harvard University was able to determine that, in the several hours leading up to the receipt of the e-mail messages described above, ELDO KIM accessed TOR using Harvard’s wireless network.” All that Tor did was make the cops jump a few extra steps. But it wasn’t hard, nothing that a bit of manpower with full legal authority to access network records couldn’t solve. It helped that Harvard’s network logging all metadata access on the network — sorta like the NSA.

Over the past few years, U.S. law enforcement has taken control and shutdown a series of illegal child porn and drug marketplaces operating on what should have been untraceable, hyper-anonymous servers running in the Tor cloud.

In 2013, they took down Freedom Hosting, which was accused of being a massive child porn hosting operation — but not before taking control of its servers and intercepting all of its communication with customers. The FBI did the same thing that same year with the online drug superstore Silkroad, which also ran its services in the Tor cloud. Although, rookie mistakes helped FBI unmask the identity of Dred Pirate Roberts, it is still a mystery how they were able to totally take over and control, and even copy, a server run in the Tor cloud — something that is supposed to be impossible.

Back in 2007, a Swedish hacker/researcher named Dan Egerstad showed that just by running a Tor node, he could siphon and read all the unencrypted traffic that went through his chunk of the Tor network. He was able to access logins and passwords to accounts of NGOs, companies, and the embassies of India and Iran. Egerstad thought at first that embassy staff were just being careless with their info, but quickly realized that he had actually stumbled on a hack/surveillance operation in which Tor was being used to covertly access these accounts.

Although Egerstad was a big fan of Tor and still believes that Tor can provide anonymity if used correctly, the experience made him highly suspicious.

He told Sydney Morning Herald that he thinks many of the major Tor nodes are being run by intelligence agencies or other parties interested in listening in on Tor communication.

“I don’t like speculating about it, but I’m telling people that it is possible. And if you actually look in to where these Tor nodes are hosted and how big they are, some of these nodes cost thousands of dollars each month just to host because they’re using lots of bandwidth, they’re heavy-duty servers and so on. Who would pay for this and be anonymous? For example, five of six of them are in Washington D.C.…”



Tor stinks?

Tor supporters point to a cache of NSA documents leaked by Snowden to prove that the agency fears and hates Tor. A 2013 Guardian story based on these docs — written by James Ball, Bruce Schneier and Glenn Greenwald — argues that agency is all but powerless against the anonymity tool.

…the documents suggest that the fundamental security of the Torservice remains intact. One top-secret presentation, titled ‘Tor Stinks’, states: “We will never be able to de-anonymize all Tor users all the time.” It continues: “With manual analysis we can de-anonymize a very small fraction of Tor users,” and says the agency has had “no success de-anonymizing a user in response” to a specific request.

Another top-secret presentation calls Tor “the king of high-secure, low-latency internet anonymity”.

But the NSA docs are far from conclusive and offer conflicting bits of evidence, allowing for multiple interpretations. But the fact is that the NSA and GCHQ clearly have the capability to compromise Tor, but it might take a bit of targeted effort.

TOR_STINKS_-_NSA

One thing is clear: the NSA most certainly does not hate or fear Tor. And some aspects about Tor are definitely welcomed by the NSA, in part because it helps concentrate potential “targets” in one convenient location.

Tor Stinks… But it Could be Worse

• Critical mass of targets use Tor. Scaring them away might be counterproductive.

• We can increase our success rate and provide more client IPs for individual Tor users.

• We will never get 100% but we don’t need to provide true IPs for every target every time they use Tor.



Tor network is not as difficult to capture as it may seem…

In 2012, Tor co-founder Roger Dingledine revealed that the Tor Network is configured to prioritize speed and route traffic through through the fastest servers/nodes available. As a result, the vast bulk of Tor traffic runs through several dozen of the fastest and most dependable servers: “on today’s network, clients choose one of the fastest 5 exit relays around 25-30% of the time, and 80% of their choices come from a pool of 40-50 relays.”

Dingledine was criticized by Tor community for the obvious reason that funneling traffic through a handful of fast nodes made surveilling and subverting Tor much easier. Anyone can run a Tor node — a research student in Germany, a guy with FIOS connection in Victorville (which is what I did for a few months), an NSA front out of Hawaii or a guy working for China’s Internet Police.

There’s no way of knowing if the people running the fastest most stable nodes are doing it out of goodwill or because it’s the best way to listen in and subvert the Tor network. Particularly troubling was that Snowden’s leaks clearly showed the NSA and GCHQ run Tor nodes, and are interested in running more.

And running 50 Tor nodes doesn’t seem like it would be too difficult for any of the world’s intelligence agencies — whether American, German, British, Russian, Chinese or Iranian. Hell, if you’re an intelligence agency, there’s no reason not to run a Tor node.

Back in 2005, Dingledine admitted to Wired that this was a “tricky design question” but couldn’t provide a good answer to how they’d handle it. In 2012, he dismissed his critics altogether, explaining that he was perfectly willing to sacrifice security for speed — whatever it took to take get more people to use Tor:

This choice goes back to the original discussion that Mike Perry and I were wrestling with a few years ago… if we want to end up with a fast safe network, do we get there by having a slow safe network and hoping it’ll get faster, or by having a fast less-safe network and hoping it’ll get safer? We opted for the “if we don’t stay relevant to the world, Tor will never grow enough” route.



Speaking of spooks running Tor nodes…

If you thought the Tor story couldn’t get any weirder, it can and does. Probably the strangest part of this whole saga is the fact that Edward Snowden ran multiple high-bandwidth Tor nodes while working as an NSA contractor in Hawaii.

This only became publicly known last May, when Tor developer Runa Sandvik (who also drew her salary from Pentagon/State Department sources at Tor) told Wired’s Kevin Poulsen that just two weeks before he would try to get in touch with Glenn Greenwald, Snowden emailed her, explaining that he ran a major Tor node and wanted to get some Tor stickers.

Stickers? Yes, stickers.

Screen Shot 2014-07-16 at 9.39.16 AM

Here’s Wired:

In his e-mail, Snowden wrote that he personally ran one of the “major tor exits”–a 2 gbps server named “TheSignal”–and was trying to persuade some unnamed coworkers at his office to set up additional servers. He didn’t say where he worked. But he wanted to know if Sandvik could send him a stack of official Tor stickers. (In some post-leak photos of Snowden you can see the Tor sticker on the back of his laptop, next to the EFF sticker).

Snowden’s request for Tor stickers turned into something a bit more intimate. Turned out that Sandvik was already planning to go to Hawaii for vacation, so she suggested they meet up to talk about communication security and encryption.

She wrote Snowden back and offered to give a presentation about Tor to a local audience. Snowden was enthusiastic and offered to set up a crypto party for the occasion.

So the two of them threw a “crypto party” at a local coffee shop in Honolulu, teaching twenty or so locals how to use Tor and encrypt their hard drives. “He introduced himself as Ed. We talked for a bit before everything started. And I remember asking where he worked or what he did, and he didn’t really want to tell,” Sandvik told Wired.

But she did learn that Snowden was running more than one Tor exit node, and that he was trying to get some of his buddies at “work”to set up additional Tor nodes…

H’mmm….So Snowden running powerful Tor nodes and trying to get his NSA colleagues to run them, too?

I reached out to Sandvik for comment. She didn’t reply. But Wired’s Poulsen suggested that running Tor nodes and throwing a crypto party was a pet privacy project for Snowden. “Even as he was thinking globally, he was acting locally.”

But it’s hard to imagine a guy with top secret security clearance in the midst of planning to steal a huge cache of secrets would risk running a Tor node to help out the privacy cause. But then, who hell knows what any of this means.

I guess it’s fitting that Tor’s logo is an onion — because the more layers you peel and the deeper you get, the less things make sense and the more you realize that there is no end or bottom to it. It’s hard to get any straight answers — or even know what questions you should be asking.

In that way, the Tor Project more resembles a spook project than a tool designed by a culture that values accountability or transparency.

User avatar
greenseed
Posts: 563
Joined: Wed Sep 10, 2014 3:17 pm
Reputation: 651

Postby greenseed » Sun Mar 15, 2015 6:42 pm

http://pando.com/2014/07/22/hall-of-mirrors-wikileaks-volunteer-helped-build-tor-was-funded-by-the-pentagon/

Hall of Mirrors: Wikileaks volunteer helped build Tor, was funded by the Pentagon

BY YASHA LEVINE
ON JULY 22, 2014

SONY DSCLast week, I wrote an article about the Tor Network, an anonymity tool developed, built, and (currently) financed by the US National Security State: the Pentagon, the State Department, and a CIA spinoff, the International Broadcasting Bureau, that also operates a propaganda outfit aimed at subverting Cuba’s communist regime.

While most of the story — Tor’s NatSec sponsors, military functionality, and the people involved — is relatively straightforward, at times the narrative threads can veer into weird and murky territory.

One of these spooky tangents involves NSA contractor Edward Snowden.

The Snowden story itself is incomplete and insufficiently transparent, but one thing we’ve learned is that in his final months before fleeing, Snowden ran multiple high-bandwidth Tor exit nodes while working as an NSA contractor in Hawaii.

The fact that Snowden ran Tor nodes had been known to many in the Tor/crypto-privacy community for quite some time. But it only became public knowledge this past May, when former Tor developer Runa Sandvik decided to spill the news to Wired’s Kevin Poulsen. (A strange choice for Sandvik to spill the beans to, given what Glenn Greenwald called Kevin Poulsen’s “journalistic disgrace” in his articles about whistleblower Chelsea Manning.)

In mid-November 2012, just a few weeks before Snowden reached out to Glenn Greenwald, he emailed Sandvik, telling her that he ran a major Tor node, and asking her if she could help get him some Tor stickers to give out to his colleagues. Snowden used the same anonymous email address — [email protected] — to contact Sandvik that he would use a couple of weeks later to unsuccessfully attempt to contact Greenwald. Despite the fact that Snowden was both an NSA spook and planning to leak his growing trove of NSA documents, he provided Sandvik with his full real name and his full real address. That would seem to be reckless behavior, unusual given Snowden’s careful and deliberate movements in everything else.

As it turned out, Sandvik was already planning to visit Hawaii for vacation, where Snowden told her he lived and worked, so she suggested that they meet up there. In her capacity as a Tor ambassador, Sandvik offered to give a talk to locals about communication security and encryption. Snowden was apparently “enthusiastic” about the idea, and they agreed to host a “crypto party.”

Snowden went to work rallying together local Hawaii-based techies: He created a wiki with details about the upcoming Runa Sandvik speaking event, and left a wide digital trail that included his anonymous Lavabit email address posted on the Internet. Snowden then used this same account to get in touch with Asher Wolf — who’s credited with coming up with the idea of hosting crypto-parties to teach people about info security — to ask her for tips and advice, which she gladly provided.

On December 11, 2012 — about three weeks after he first emailed her — Sandvik and Snowden finally met and hosted a “crypto party” at a local “art space behind a furniture store” in Honolulu. There they taught twenty or so locals how to use Tor and encrypt their hard drives, and Snowden personally hosted a session about how to set up and run a Tor server.

“He introduced himself as Ed. We talked for a bit before everything started. And I remember asking where he worked or what he did, and he didn’t really want to tell,” Sandvik told Wired.

What she did end up learning was that Snowden was running more than one Tor exit node, and that he was trying to get some of his “work” buddies to run their own Tor nodes as well. That was his excuse for getting those Tor stickers from Sandvik: He told her he thought they would motivate his buddies to get more involved.

“He said he had been talking [sic] some of the more technical guys at work into setting up some additional fast servers, and figured some swag might incentivize them to do it sooner rather than later,” Sandvik told Wired.

The idea of a bunch of NSA contractors running exit Tor nodes is more than a little disturbing, as exit nodes have long been known to be one of the network’s most obvious weaknesses. Snowden’s own NSA leaks reveal the NSA and GCHQ run their own Tor nodes.

Which brings me to the obvious question: Was Snowden running Tor nodes as part of his job at the NSA?

I tried asking Sandvik, but she hasn’t replied to my request for comment. Wired’s Poulsen suggested that running Tor nodes and throwing a crypto party was a pet privacy project for Snowden. “Even as he was thinking globally, he was acting locally.”

Sure, that’s one explanation. But for some reason, I find it hard to imagine that an NSA contractor with top secret security clearance, in the middle of stealing a huge cache of secrets and leaking them to the world, would risk running a Tor node and lobbying his NSA coworkers to do the same — just to help out the cause of Internet privacy.

And if he was just a naive Internet privacy activist, did Snowden realize that he was reaching out — and disclosing his identity and address — to a person on the payroll of an outfit almost completely funded by the US National Security State?

Tor’s Sandvik received roughly $140,000 for her work as a Tor contractor from 2011 through 2012 — with the funds supporting her salary coming mostly from Pentagon and intel-connected grants. The whole thing is bizarro-world: An NSA contractor secretly contacting a Pentagon-funded project employee in order to teach locals how to evade government internet spooks — all while failing to disclose their own ties to government spooks.

Runa Sandvik’s run-in with Edward Snowden in December 2012 was not her last. Sandvik recently left her Pentagon-funded job at Tor and now works as a “privacy and security researcher” for Freedom of the Press Foundation (FPF), a group established to promote and help leakers of government secrets.

Curiously, this organization was founded the same month Edward Snowden first emailed Greenwald (and then met Sandvik in Hawaii), with the stated purpose, according to Greenwald, of providing funding to WikiLeaks.

FPF now features Edward Snowden on its Board of Directors, along with Glenn Greenwald and Laura Poitras — the two biggest beneficiaries of Snowden’s NSA leaks, along with their billionaire publisher Pierre Omidyar, who now funds the FPF, and is also a big supporter of Tor.

The Freedom of the Press Foundation promotes Tor on its website as a tool that can help individuals, journalists and activists to avoid surveillance online. Nowhere does FPF mention that Tor was designed, funded, and still supported by the US National Security State in order to conceal online spook activities.

And if you thought that all this Snowden-Tor-spook stuff couldn’t get any more confusing or convoluted, it can and does.

After Edward Snowden failed to make contact with Glenn Greenwald (Greenwald initially dismissed Snowden as a crackpot), the would-be leaker then contacted Laura Poitras. Unlike Greenwald, she took Snowden seriously and decided to spend some time checking out his story. In order to vet Snowden, Poitras brought in Jacob Appelbaum — a Tor developer who, as I wrote last week, has spent the past five years working for an organization that’s funded almost exclusively by the US National Security State.

Jacob Appelbaum and Wikileaks

In 2009, Jacob Appelbaum came onboard as one of five salaried employees of the Tor Network, earning a salary of $96,000 as a developer. About 90% of Tor’s funds that year came from federal grants, mostly from the State Department and the CIA-spinoff International Broadcasting Bureau (IBB). Appelbaum’s Tor gig has continued uninterrupted ever since, netting him somewhere around a half-million dollars. Not a bad haul.

Yet in 2010, right in the midst of him being funded by intel grants, Appelbaum emerged as an important Wikileaks volunteer. He used his celebrity status in the hacker world to promote the organization, helped secure Wikileaks’ servers with Tor technology and even bailed Assange out of public speaking gigs when the heat from US authorities got too hot.

That year, Rolling Stone did a big story on Jacob Appelbaum, profiling him as a brilliant techno-anarchist rebel who’s fighting the good fight by taking on America’s evil military-surveillance apparatus. The mag described him as the “American Wikileaks Hacker” and featured praise from none other than Julian Assange himself.

“Jake has been a tireless promoter behind the scenes of our cause,” Julian Assange told the magazine.

Did Assange know that Appelbaum was a key employee at an organization funded almost exclusively by the US National Security State — the same all-powerful imperial machine that Wikileaks and Appelbaum were supposedly fighting against?

And it’s not just the money. Appelbaum also spends quite a bit of time touring the world and giving US government-sponsored “training sessions” to corporate lackeys, pro-western “activists” and even government officials of repressive states that are allied with the United States.

Here’s Appelbaum’s RS profile on this secretive part of his Tor work:

…Appelbaum spends much of each year leading Tor training sessions around the world, often conducted in secrecy to protect activists whose lives are in danger. Some, like the sex-worker advocates from Southeast Asia he tutored, had limited knowledge of computers. Others, like a group of students Appelbaum trained at a seminar in Qatar, are highly sophisticated: One worked on the government’s censorship network, another works for a national oil company, and a third created an Al-Jazeera message board that allows citizens to post comments anonymously.

Appelbaum trained an employee of Qatar’s “censorship network”? That’s nice of him — I mean, why wouldn’t you train a censorship apparatchik working for an autocratic state known for brutal “modern slavery,” where foreign workers are routinely worked to death in the punishing Qatari heat, and where there’s no freedom of religion and sexuality?

For someone who sells himself as a techno-anarchist fighting against the all-powerful US Imperial Surveillance State, it’s a bit weird to see Appelbaum fight for the interests of political movements and activists in conflict zones around the world — activists that just so happen to be in states like Iran and Syria, where the U.S. has been trying to conduct regime operations since before Appelbaum was born.

In a joint talk last year with Tor co-founder Roger Dingledine, Appelbaum argued that sure, Tor might facilitate the spread of child pornography, but this was a necessary evil in the great fight against global injustice at the hands of dictators in countries like Iran and Syria:

If you have a tool and someone is being abused. There is a child that is being abused. And you have this tool and you say ‘Gosh, we should take care of that we should get rid of that tool so that child won’t be abused anymore.’

Well you have someone in Syria right now who might not be even involved in the revolution or the civil war — whatever you want to call Assad committing genocide against people right now. If you take away Tor, you don’t stop the child abuse. And you do harm the person in Syria who needs that help actively.

…If you take away Tor you are going to cause a net harm. Because really awful people that are going to commit these crimes…are going to commit a pretty simple crime [child pornography? —YL] compared to the heinous crimes they are interested in. You see this with Assad and his campaign against the Syrian people, where, what, 70,000 people been killed.

How the hell does Appelbaum reconcile all these conflicted sides of his life: employee of an organization funded by military/intel grants, radical transparency activist, ambassador of American-style democracy?

I asked him, but got no reply.

Clearly, Appelbaum thinks of himself as a hacker-spy, an anarcho-007, who plays the game and lives the dream of every adolescent boy in the universe: to be a secret agent.

Just look at the dramatic scene he set up in his apartment for the benefit of a gullible Rolling Stone correspondent:

Appelbaum has dedicated his life to fighting for anonymity and privacy. An anarchist street kid raised by a heroin-addict father, he dropped out of high school, taught himself the intricacies of code and developed a healthy paranoia along the way. “I don’t want to live in a world where everyone is watched all the time,” he says.

…I visit him at his cavernous duplex in San Francisco. The only furniture is a black couch, a black chair and a low black table; a Guy Fawkes mask hangs on a wall in the kitchen. The floor is littered with Ziploc bags containing bundles of foreign cash: Argentine pesos, Swiss francs, Romanian lei, old Iraqi dinars bearing Saddam Hussein’s face. The bag marked “Zimbabwe” contains a single $50 billion bill. Photographs, most of them taken by Appelbaum, cover the wall above his desk: punk girls in seductive poses and a portrait of his deceased father, an actor, in drag.

A black couch, a single desk, pictures of beautiful women and cash from exotic, dangerous places laid out on the floor in neat zip-lock bags. Man, what a life! Whatever or whoever Appelbaum is, he’s got a feel for drama and can put on a good show.

As for how this all fits in with Tor? Well, your guess is as good as mine. All I can say is: welcome to the ridiculous, hall of mirrors world of (what’s supposed to be) the most effective, trustworthy tool for online anonymity.

User avatar
greenseed
Posts: 563
Joined: Wed Sep 10, 2014 3:17 pm
Reputation: 651

Postby greenseed » Sun Mar 15, 2015 6:46 pm

Yasha Levine is writing a book on this subject called Surveillance Valley: The Rise of the Google-Military Complex & is running a Kickstarter to do so: https://www.kickstarter.com/projects/7331688/surveillance-valley-the-rise-of-the-google-militar


i put 15 in for the pdf and hope some of you might as well. this is an important subject that needs more light.

User avatar
greenseed
Posts: 563
Joined: Wed Sep 10, 2014 3:17 pm
Reputation: 651

Postby greenseed » Sun Apr 05, 2015 7:34 pm

here's a good podcast by @porkinspolicy reviewing above info and digging a bit deeper

http://porkinspolicyreview.com/2014/08/01/porkins-policy-radio-episode-26-peeling-the-onion-behind-tor-eff-and-john-perry-barlow/




User avatar
Redneck
Posts: 561
Joined: Wed Dec 02, 2015 7:44 am
Reputation: 352

Postby Redneck » Wed Dec 30, 2015 6:24 am

What is the deal with the dark web anyway?

I use the TOR browser to see the secret shit, but it's like nothing has been updated for several months. I kind of feel like I missed the boat for the dark web, and there's something even darker that people are using now.

User avatar
greenseed
Posts: 563
Joined: Wed Sep 10, 2014 3:17 pm
Reputation: 651

Postby greenseed » Sun Jan 10, 2016 9:53 pm

I'm not sure Redneck, i have never ventured there myself.

User avatar
robbstar
Posts: 374
Joined: Tue Sep 22, 2015 3:39 am
Reputation: 553

Postby robbstar » Fri Jan 15, 2016 8:03 am

This was really interesting. Control everything , especially counter culture!!

User avatar
Redneck
Posts: 561
Joined: Wed Dec 02, 2015 7:44 am
Reputation: 352

Postby Redneck » Fri Jan 22, 2016 8:16 pm

greenseed wrote:I'm not sure Redneck, i have never ventured there myself.




I'm sure it is good if you have the URL for super secret sites, but the search engines on the dark web are almost useless. I found a lot of silk road sites but even most of them hadn't been getting many new posts, and there are some dodgy ID theft sites and a few reddit style groups, but apart from that, it was crap.

As for spooks using it, the internet was created by the military, and the NSA now watches everything we do anyway, so it doesn't deter me that TOR is a CIA tool. I have found that most mainstream websites which require you to login or register, won't allow you to do so with TOR anyway. A message that says high security browsers are not allowed will usually pop up.


Return to “The Grand Chessboard”

Who is online

Users browsing this forum: No registered users and 214 guests