I don't really have time to link things, nor do I think this is that big of a deal, but as for me I'm on Tor for sure. I did provide words and phrases for you to look up on your own.

And there are sites where people have been visited by the authorities and I wont be confirming which ones they are.

I'm just seeing this now but let me get this slight misunderstanding out of the way.

This kind of attack is in essence a man-in-the-middle attack by ARP spoofing:
1) The attacker makes your computer think that they are the destination of all your internet traffic (ARP spoofing)
2) The attacker makes the HTTPS connection to the DMT-Nexus server.
3) The attacker relays the traffic from and to the DMT-Nexus server to you via an unsecured line (HTTP, so without the S).

So what happens with this attack is the following:

YOU <- HTTP -> ATTACKER <- HTTPS -> DMT-Nexus server

This way the attacker can read your unencrypted traffic from and to the DMT-Nexus server.

As you probably already have guessed, the solution to prevent this kind of attack is rather simple: check if you are connecting to the DMT-Nexus via HTTPS!

If HTTPS is showing then your line is secure. With HTTPS your ISP can still see that you connect to the DMT-Nexus server but they cannot see what threads you read and which posts you make.


Kind regards,

The Traveler

whaaaat?

Dude they easily inject the little lock icon or whatever plus it still reads https..

The tools make it all seemless, you dont even have to re-approve the certificate like happened in the early versions..

You cannot tell..

The lock icon is just the favicon. Exploits like that are the main reason why the favicon is not shown anymore in the address bar in Chrome for example .

And no, you will see HTTP and not HTTPS. Please look more into this if you want to make certain claims.


Kind regards,

The Traveler

Sorry, I don't test with Chrome because I don't use things with such TOS.
Firefox doesn't have these colors.

For those who do not know yet, one can download Tor to browse the internet safely:

https://www.torproject.org/download/download

Uhm, did you actually READ the first post in this thread???

Forgive me, he started a new thread on the subject of Tor. In the interest of keeping the forum clean I moved it here.

Guess who the target is on these days: users of anon networks.

While the documents make clear that data collection and interception must cease immediately once it's determined a target is within the US, they still provide analysts with a fair amount of leeway. And that leeway seems to work to the disadvantage of people who take steps to protect their Internet communications from prying eyes. For instance, a person whose physical location is unknown—which more often than not is the case when someone uses anonymity software from the Tor Project—"will not be treated as a United States person, unless such person can be positively identified as such, or the nature or circumstances of the person's communications give rise to a reasonable belief that such person is a United States person," the secret document stated.