“Tor challenges some assumptions of Facebook’s security mechanisms - for example its design means that from the perspective of our systems a person who appears to be connecting from Australia at one moment may the next appear to be in Sweden or Canada,” Muffett said.
Because Tor bounces traffic between nodes to hide the user`s actual location, Facebook is misled to believe the user is a hacker trying to conceal his identity. But the real question is: if Facebook has the resources to brute force the correct full key in a fair amount of time, what could stop Google or the NSA from doing it?”įacebook also allows access via HTTPS (Hypertext Transfer Protocol Secure), but the site`s security infrastructure conflicts with the way the anonymity-focused browser works. We did the math, you would need around 1.000.000 servers up for 1 year to generate “facebookcorewww” ” (without the trailing “i”, this being randomly there) on the fastest GPUs out there. I feel that we were tremendously fortunate,” Muffett replied to a user. “Regarding the Onion address, we did what everyone else does and (in our case) created a bunch of addresses with a “facebook” prefix and then went fishing around in the results for a good one. This means you have to generate a custom key in order to derive a name like “facebookcoreOn user accusations of having done so, Facebook said it got lucky. The hidden service name is derived from a 1024 bit RSA Key randomly generated when putting your service online in TOR”. Catalin Cosoi, Chief Security Strategist at Bitdefender says: Through an “.onion” address they can connect to Facebook`s Core WWW Infrastructure that provides a direct connection between the browser and a Facebook data center. Users who have the Tor-enabled browser enabled can access Facebook directly through the URL, said Alec Muffett, software engineer at Facebook. Facebook implemented a new way for users to access its site via Tor “without losing the cryptographic protections provided by the Tor cloud” and disclosing their location, according to a Facebook announcement.
0 kommentar(er)
