Bitcoin Forum

Economy => Service Discussion => Topic started by: Indymoney on August 12, 2020, 06:09:10 PM



Title: Tor Network Stealing Coins
Post by: Indymoney on August 12, 2020, 06:09:10 PM
I am not sure is this related to here or no but still posting here if you are using Tor Network Browser then surely its matter of worry for you because its compromised and Hacker is stealing Bitcoins and Cryptocurrencies from users.
https://www.coindesk.com/tor-network-compromised-single-hacker-stealing-users-bitcoin-report


Title: Re: Tor Network Stealing Coins
Post by: suchmoon on August 12, 2020, 06:23:18 PM
Original article: https://medium.com/@nusenu/how-malicious-tor-relays-are-exploiting-users-in-2020-part-i-1097575c0cac

Sounds scary but:

Quote
It is hard to detect for Tor Browser users that do not specifically look for the “https://” in the URL bar.

I mean come on... if you're on Tor you gotta know this, right? RIGHT? "Don't trust exit nodes" is like the #1 rule.

Or just use mixers that offer onion sites. Still gotta be careful with those too - if you're tricked into clicking the wrong link you're fucked just the same.


Title: Re: Tor Network Stealing Coins
Post by: o_e_l_e_o on August 12, 2020, 06:42:19 PM
I'll quote myself from another topic about this:

HTTPS Everywhere is installed by default on Tor. If you aren't using Tor, HTTPS Everywhere is one of the few extensions that you should download.

However, simply installing it isn't enough. Its default behavior is to force HTTPS whenever it can, but still allow HTTP connections. You need to click on the little icon up in your menu bar (a white "S" in a blue square) or go in to your extension options and enable the option to "Encrypt All Sites Eligible". This will block all connections to HTTP sites and display a large warning page whenever a HTTP connection is made which allows the user to choose whether to proceed at their own risk.


Title: Re: Tor Network Stealing Coins
Post by: cryptomaniac_xxx on August 13, 2020, 11:44:54 AM
I have this topic covered here, Cyber actors are now targeting Tor exit nodes to perform SSL stripping (https://bitcointalk.org/index.php?topic=5268039.0).