Now, what is taught and how it works?
Now, what is taught now that the Inter can refer to several different components, now there is a program
that you can run on your computer that helps you or helps keep you safe on the Internet.
It protects you by bouncing your communications around a distributed network of relays run by volunteers
all around the world.
It prevents somebody watching your Internet connection from learning what sites you visit.
OK, so actually this set of volunteer relays is called the tornado.
The way most people use Tor is with Tor browser, which is a version of Firefox that fixes many privacy
issues.
Now, the whole project is a nonprofit or charity organization that maintains and develops the tool
for software.
It has received funds from the U.S. government primarily, and additional aid from Swedish government
and different NGOs and individual sponsors right now.
Who created the TOR?
Now, actually, torus is the principle of onion routing, which was developed by Paul Severe son,
Michael Green and David Skalak.
Now, I'm sorry, maybe I missed pronounce the names.
So again, I'm so sorry about this.
At the United States, they created that or developed that at the United States Naval Research Laboratory
in 1990s.
Now, again, you may say now this is a boring stuff.
Please.
I know this is somehow boring, but please follow me for now, because when the real tech start, it's
very important to have a history, of course, now because somebody may say, oh, yeah, they have
a connection with the NSA and they are spying on us.
Now, this this may sound true now.
Maybe this is true or this is false.
And I'm not sure, actually, but I want for you to know all of the history and every detail about it.
No further development was carried out and the financial rule of the Electronic Frontier Foundation,
the effort.
OK, no, here is the most important part.
Actually, I know this this that was a very boring part, a history of Tor project.
But this is the most important part.
And this is required to focus here to understand what Eliot did.
OK, now Tor uses the concept of the uninvolved method in which the use of data is encrypted and then
transferred through different layers present in the tornado.
OK, now here is the first step.
Now we actually talk makes it possible for users to hide their location while offering various kind
of services, such as publishing or an instant messaging server.
All right.
So using something called 24 points and other Tor users can connect to this on your services or formerly
known as hidden services.
OK.
All right.
Now here you can see that in the step one book.
Here we have BOPE, we have ELLIS', we have this DB or database server.
We have this, as you can see from the Tor Cloud or the Tower Network, there are a lot of relays or
nodes and these nodes called the IP or introduction points, as you can see, IP, which means introduction
points.
And here the green line here is talk circuit talk circuit, which means that there are a network between
those three for Bob.
OK, and here is the public key and here is the deeper point.
OK, or the Arpey.
OK, now the step one is that book because some introduction point, as you can see, I.B. one, two
or three and build circuits to them.
All right.
And he will ask them to act as introduction point by telling them it's public key.
OK, but not that in the following figures here, the green links are selected rather than direct connection.
OK, so by using a full Tor circuit, it is hard for anyone to associate and connection point with the
onion servers IP address.
OK, so these are not connected.
These are circuit and BOPE share his public key with them.
All right.
By the way, I got this from the official website of Tor Project.
If you are interested to read more, I provide you with the link to it.
Please check that external resources here from this lecture.
You can see it.
Just go to it and read more if you want to.
Actually, there are a lot of low level detail of the protocol, if you are interested.
OK, but I will try to make it readable and easy to understand as much as possible.
The step to book advertises his service, which is the X, Y, Z, The Onion at the database.
OK, so actually here book assembles and on your service descriptor, as you can see, this one that
dots square here.
So actually this descriptor containing its public key and summary of each interaction point and sign
this descriptor, which is this one with its private key.
OK, so a book will sign this descriptor, as you can see, that contains the introduction point and
the B.K..
And after it signs with this this key, this private key, it will go it will be uploaded to that nasty
habit that inside that database or the DB server.
OK, no, in step three here, you can see that Enis here's that X, Y, Z, that Onion exists and she
requests more info from the database.
She also sits up at individual point, though she couldn't have done this before.
OK, so here actually any.
Want to connect or to contact the online service, which is the tour or their stuff, to learn more
about their own interests first, so then I can initiate the connection establishment by downloading
the descriptor from the step by step.
And so it will get that descriptor that uploaded, remember, and the previous about upload this descriptor
that signed by his private key and he uploaded to that DB, by the way, it contains the introduction
point and the public key then unless you retrieve it.
OK, now and it's no the set of introduction points and that right.
Publicly to use.
OK, so around this time that Ellis will create a circuit to another randomly relay and ask it to act
as a rendezvous point by turning it a one time secret.
OK, now in step four actually, and it's the right message to Bob encrypted to be listing the rendezvous
point at a one time secret and asked an introduction point to to both.
So you can see that the descriptor this time, it has the one time secret and it put it on the agenda
for Boyte.
OK, and it will request to be delivered and then I would request it to be delivered to the onea service,
OK?
Now, the only service here in our case is Bob.
OK, no.
In step five, Bob connects to Ellis Randy for point and provides here one time secret.
OK, so Bob will connect to that individual for Ellis and it will provide it with a one time secret.
So Bob will decrypt that and introduce message and it will find the address of that in the void.
OK, so how Bob actually know about that individual point actually got this encrypted key, this encrypted
descriptor and they kept it and it will find the address of the rendezvous point and the one time secret
in it.
So the service creates a circuit to a rendezvous point.
And since the one time secret to it and Aaron Devor message.
OK, now finally, Bob and Alice proceed to use their thoughts circuit like Norman.
So because the rendezvous point notifies that and it's about successful connection established by Bob
then after that.
But Alice and Bob can use their circuits to their rendezvous point and communicating for each other,
OK.
No, actually, the complete connection between Alice and Bob consists of six relays.
Three of them were picked by the client, which is Alice, and three of them were picked by the only
service, which is in our case.
All right.
So actually, it is secure and each time actually it is randomized.
OK, so it creates multilayered encryption like the onion.
And it is hard to photograph to keep the identity of the user safe.
As a result, nobody can link your identity to any single point.
OK, now here is a simple graph, actually, so you can see that we have this Tor client and this is
the destination.
Now, here is the entry card and here is the Tor network.
And inside it we have relays or relays.
Finally, we have Exit Renai and this exit relay, it will give the traffic to the destination.
But you can see that the green is encrypted and the dotted red lines are not encrypted by Tor.
OK, so for this tallit, what the entry guard and the exit really knows, what is tor?
OK, actually the entry guard know the IP of our client, but the exit relay.
No.
Where is the destination.
As you can see this, these are encrypted by Tor.
So the exit relay will understand or know what is the destination but actually will exit relay.
No.
The idea of torture.
No, actually the media really will not know.
The idea of not only the aggregate will know the origin or the IP of the talks.
OK, but exactly.
They will not know whether they will not know.
Another question.
Will the entry guard know the destination?
No, actually, it will not know.
Then literally, no, it will not.
No, but they exist really.
Yeah, it will understand and it will know the destination because this is the entry guard, it will
know the origin or the turbulent I.B. and the exit.
It will not know the IP of the turtling, but it will know the idea of the destination.
And the entry guard will not know the IP of the destination, only the IP of turtled.
OK.
Now I know you may get confused, but again, if you want to read more about Tor, actually you can
check the link.
I provided you to that Option Tor project and you can read more about it if you are interested.
Hear what Elliot did actually is that he know that there are a destination or there are a server running
behind or running on the terror network.
OK, and how we did know that we will discuss that indicates no worries.
OK, so what encryption there is decrypted at each successful tor and the remaining data is forwarded
to any random RENEA until it reached its destination.
So so for the destination server, the last or not or exit relay appears as the origin of the data.
OK.
So it does tough to trace the identity of the user or the server by any civilian system, acting as
the middlemen other than providing anonymity to standalone users can also provide anonymity to you.
Websites and servers in the form of Tor hidden services also appear to be applications like Bit Torrent
can be configured to the Tor network and download torrent files.
No is using Tor in the event.
No, because Tor browser and Dark Web are illegal on their own.
However, if you end up performing some illegal activity obviously on the Dark Web using Tor, that
would surely invite trouble.
So as always, we recommend and by the way, I got this from the official website.
As you can see, we recommend that you use this technology to perform legal actions and enhance your
privacy only.
So, of course, obviously don't use it for bad stuff.
Now, the NSA agent, Edward Snowden, used Tor to leak information about PRISM to The Guardian and
The Washington Post.
However, the story is not all good.
Good, because Tor faces criticism for the reason that it acts as a medium for different illegal activities
like data breaches, drug dealing, gambling, being home to dark websites and so on.
OK, now Tor is also used by criminals minds to communicate over the network or the Internet while keeping
their identity hidden, which makes it difficult for the security agencies to trace them.
The U.S. National Security Agency NSA has called for the king of high, secure, low latency Internet
anonymity, and it has received similar comments by BusinessWeek magazine.
Perhaps the most effective means of defeating the online surveillance effort of intelligence agencies
around the world.
OK, now another speculation made is that Tor takes its funding from the US government, which may lead
to the assumption that NSA may have compromised the identities of individual Tor users.
However, towards former executive director Andrew Luman disclaimed any considerations with NSA.
When I'm not saying to believe that or not, I'm just reading you.
You are the one to judge if this is true or not.
So is to say there are various of claims that have been made about compromising towards anonymity and
security from time to time.
The most famous one was the back of an attack in which the researchers claimed to have identified around
ten thousand IP addresses of active BitTorrent users who were connected to the ATO and the Heartbleed,
but was behind another major compromise in April 2014, which halted the Tor network for several days.
OK, there are traffic fingerprinting methods that used to analyze Web traffic by analyzing the responses
and Becket's in a particular direction.
This technique can be used to attack the terror network by making the attackers computer act as the
guard OK, so that the computer would act as the guard or the trigger.
The entry point that we saw previously, the main vulnerability was found at its exit points where the
level of security is very low as compared to the rest of the Tor network.