ICCS Tor Overview

Andrew Lewmanandrew@torproject.org

August 4, 2010

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 1 / 15

The Tor Project, Inc.

501(c)(3) non-profit organization dedicated to the research anddevelopment of technologies for online anonymity and privacy

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 2 / 15

What is Tor?

online anonymity software and network

open source, freely available (3-clause BSD license)

active research environment:Rice, UMN, NSF, NRL, Drexel, Waterloo, Cambridge UK, BambergGermany, Boston U, Harvard, MIT, RPI, GaTech

increasingly diverse toolset:Tor, Torbutton, Tor Browser Bundle, TorVM, Incognito LiveCD, TorWeather, Tor auto-responder, Secure Updater, Orbot, TorFox, Torora,Portable Tor, Tor Check, Arm, Nymble, Tor Control, Tor Wall

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 3 / 15

What is Tor?

online anonymity software and network

open source, freely available (3-clause BSD license)

active research environment:Rice, UMN, NSF, NRL, Drexel, Waterloo, Cambridge UK, BambergGermany, Boston U, Harvard, MIT, RPI, GaTech

increasingly diverse toolset:Tor, Torbutton, Tor Browser Bundle, TorVM, Incognito LiveCD, TorWeather, Tor auto-responder, Secure Updater, Orbot, TorFox, Torora,Portable Tor, Tor Check, Arm, Nymble, Tor Control, Tor Wall

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 3 / 15

What is Tor?

online anonymity software and network

open source, freely available (3-clause BSD license)

active research environment:Rice, UMN, NSF, NRL, Drexel, Waterloo, Cambridge UK, BambergGermany, Boston U, Harvard, MIT, RPI, GaTech

increasingly diverse toolset:Tor, Torbutton, Tor Browser Bundle, TorVM, Incognito LiveCD, TorWeather, Tor auto-responder, Secure Updater, Orbot, TorFox, Torora,Portable Tor, Tor Check, Arm, Nymble, Tor Control, Tor Wall

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 3 / 15

What is Tor?

online anonymity software and network

open source, freely available (3-clause BSD license)

active research environment:Rice, UMN, NSF, NRL, Drexel, Waterloo, Cambridge UK, BambergGermany, Boston U, Harvard, MIT, RPI, GaTech

increasingly diverse toolset:Tor, Torbutton, Tor Browser Bundle, TorVM, Incognito LiveCD, TorWeather, Tor auto-responder, Secure Updater, Orbot, TorFox, Torora,Portable Tor, Tor Check, Arm, Nymble, Tor Control, Tor Wall

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 3 / 15

estimated 500,000 daily users

]

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 4 / 15

Twitter in Iran: Good.

From http://www.time.com/time/world/article/0,8599,1905125,00.html

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 5 / 15

Twitter in USA: Bad.

from http://gothamist.com/2009/10/05/fbi raids queens home in g20 protes.php

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 6 / 15

Who uses Tor?

Normal people

LawEnforcement

Human RightsActivists

Business Execs

Militaries

Abuse Victims

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 7 / 15

Tor hides communication patterns by relaying data throughvolunteer servers

Tor Node

Tor Node

Tor Node

Tor Node

Tor NodeTor Node

Tor Node

Tor Node

Tor Network

Web server

Tor user

Encrypted tunnel

Unencrypted TCP

Tor Node

Tor Node

Tor Node

Exit node

Entry nodeMiddle node

Diagram: Robert Watson

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 8 / 15

Tor

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 9 / 15

Metrics

Measuring metrics anonymously

NSF grant to find out

Metrics portal:https://www.torproject.org/projects/metrics

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 10 / 15

https://www.torproject.org/projects/metrics

Tor hidden services allow privacy enhanced hosting ofservices

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 11 / 15

Operating Systems leak info like a sieve

Applications, networkstacks, plugins, oh my....

some call this ”sharing”

Did you know MicrosoftWord and OpenOfficeWriter are browsers?

http:

//www.decloak.net/ isa fine test

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 12 / 15

http://www.decloak.net/http://www.decloak.net/

Operating Systems leak info like a sieve

Applications, networkstacks, plugins, oh my....some call this ”sharing”

Did you know MicrosoftWord and OpenOfficeWriter are browsers?

http:

//www.decloak.net/ isa fine test

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 12 / 15

http://www.decloak.net/http://www.decloak.net/

Operating Systems leak info like a sieve

Applications, networkstacks, plugins, oh my....some call this ”sharing”

Did you know MicrosoftWord and OpenOfficeWriter are browsers?

http:

//www.decloak.net/ isa fine test

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 12 / 15

http://www.decloak.net/http://www.decloak.net/

Operating Systems leak info like a sieve

Applications, networkstacks, plugins, oh my....some call this ”sharing”

Did you know MicrosoftWord and OpenOfficeWriter are browsers?

http:

//www.decloak.net/ isa fine test

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 12 / 15

http://www.decloak.net/http://www.decloak.net/

Mobile Operating Systems

Entirely new set of challenges for something designed to know whereyou are

Orbot: Tor on Android.http://openideals.com/2009/10/22/orbot-proxy/

iphone, maemo, symbian, etc

Tor on Windows CE, http://www.gsmk.de as an example.

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 13 / 15

http://openideals.com/2009/10/22/orbot-proxy/http://www.gsmk.de

Next steps

Visit https://www.torproject.org/ for more information, links, andideas.

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 14 / 15

https://www.torproject.org/

Credits & Thanks

who uses tor?http://www.flickr.com/photos/mattw/2336507468/siz, MattWestervelt, CC-BY-SA.

danger!, http://flickr.com/photos/hmvh/58185411/sizes/o/,hmvh, CC-BY-SA.

500k, http://www.flickr.com/photos/lukaskracic/334850378/sizes/l/,Luka Skracic, used with permission.

Andrew Lewman andrew@torproject.org () ICCS Tor Overview August 4, 2010 15 / 15

http://www.flickr.com/photos/mattw/2336507468/sizhttp://flickr.com/photos/hmvh/58185411/sizes/o/http://www.flickr.com/photos/lukaskracic/334850378/sizes/l/http://www.flickr.com/photos/lukaskracic/334850378/sizes/l/