Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Mmm, looks about right to me...

Think of it a bit like crm114, but less hairy, bigger, and searching all your traffic.

That's not directly part of a selector but a support library, so I highly doubt anyone is targeted purely on that - but it is probably part of attempted traffic correlation attacks on Tor.

They're not very successful.)



Well.

I'd like to revise my comment above: article is 100% accurate and yes, that is real XKeyScore source code, and it is being directly called, solo, by real selectors in the wild.

I'm horrified: this is actual "your name will also go on ze list" territory. Selectors as wide as this have absolutely no genuine intelligence value whatsoever. This never saw oversight. They're insane.

Please do not let this discourage you from using Tor. Oh, quite the opposite - this shows you exactly why you need to use Tor, more than ever, and why more people, perhaps everyone, should. The more people who do, the more useless this selector becomes.

I'd like to warmly thank all the new sources who have come forward since Snowden's disclosures last year (no, this isn't from Snowden). This is absolutely golden.

By the way, malformed regexes are a frequent source of exploitable security bugs…




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: