US: Alaska man busted with 10,000+ child sex abuse images despite his many encrypted apps
arstechnica.com
Encryption alone won't save you from the feds.

All the recent dark net arrests seem to be pretty vague on how the big bad was caught (except the IM admin’s silly opsec errors) In the article they say he clicked on a honeypot link, but how was his ip or any other identifier identified, why didnt tor protect him.

Obviously this guy in question was a pedophile and an active danger, but recently in my country a state passed a law that can get you arrested if you post anything the government doesnt like, so these tools are important and need to be bulletproof.

  • MalReynolds@slrpnk.netEnglish
    30·
    4 months ago

    Compromised ? Maybe, but this guy doesn’t provide any evidence one way or the other. He’s using at least 7 other possible vectors (apparently Calculator Photo Vault just hides the gallery, no encryption, so it’s over right there) which is way too many for good opsec.

    With Tor the question has always been compromised exit nodes as I understand it.

    • nnullzz@lemmy.world
      11·
      4 months ago

      In that article they provide a list of steps to follow to be safer on Tor. Is that a good list or is there anything else one can do to maintain their privacy?

      • MalReynolds@slrpnk.netEnglish
        5·
        4 months ago

        No idea, I was just using it to illustrate the existence of compromised exit nodes, which to my mind are a pretty fatal flaw in TOR, perhaps someone knowledgeable can chime in.

      • mox@lemmy.sdf.org
        11·
        4 months ago

        Not against a government that can compel the organizations who issue the https certificates and run the https servers. And not against leaks that occur outside of https.

      • refalo@programming.dev
        1·
        4 months ago

        I wouldn’t be surprised if more than one root CA was compromised… especially the free ones.