In any case, wouldn't it be possible to build it right into the browser? I mean, everything in the browser, all plug-ins, etc... would either not work, or would have to go through tor. Thatd be much more convenient than having to completely re-boot into an entirely different OS just to use tor.

Wow, I thought tor protected you from this kind of hack in some way. Isn't there some way of stopping all non-tor connections automatically? I mean, like doing some way of catching all traffic that isn't through tor, and blocking it all. Clearly it would get in the way sometimes, but going without JS sorta makes the majority of websites useless.

I was under the impression there was some 0-day firefox exploit that allowed the hacker to download some .exe (or equiv) file to the client computer and execute it, and get the IP in that way.

In a perfect world, there would be an https-style warning "this site is attempting to display some content to you outside of the tor network, do you want to allow" or the like.

Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network[5], Debian GNU/Linux[6] and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user's real IP.
Whonix consists of two parts: One solely runs Tor and acts as a gateway, which we call Whonix-Gateway. The other, which we call Whonix-Workstation, is on a completely isolated network. Only connections through Tor are possible.

I am still a bit confused, are the users that were injected/infected the ones affected, or all users of the Tormail, IE the database and all data within it? I really can't derive this from the story. Both are important, but one is a lot more potent!

According to a Sunday blog post by the Tor Project's Executive Director, Andrew Lewman, the servers of Freedom Hosting were breached before the service went offline. "From what is known so far, the breach was used to configure the server in a way that it injects some sort of JavaScript exploit in the Web pages delivered to users,"  Lewman wrote. "This exploit is used to load a malware payload to infect user's computers.

The servers themselves are likely run on a "bulletproof" hosting service in Romania or Russia; Irish law enforcement authorities told the court Friday that Marques had transferred large sums of money to accounts in Romania and had been investigating obtaining a visa to enter Russia.

If i remember correctly there was a type of tormail you could use that did not use javascript when accessing your email

As far as i know, both win & nix bundles (noob-friendliest) come witbyh *everything* disabled in default config.

Somehow they got the IP of the server and put the 0 day exploit up to track the users who were going on the site. That's IF the account of the story is real.

My guess is the guy fucked up and got compromised somehow. Nobody knows at this point, even the TOR people are waiting to hear.

All users would have been safe if they would have disabled javascript. God damn noobs.

But this was at 103 before... so we don't have "more" bids... it just moved.

If you just receive then no, but if you  send and don't have any anomizer(VPN,Tor, proxies ) etc the. The IP is logged

And 70 BTC between that wall and 104. Why would someone put a buy at 105 for 2800 when they could at 104?
That is clear manipulation...

No big sell-off from this news?

http://www.reddit.com/r/onions/comments/1jmrta/founder_of_the_freedom_hosting_arrested_held/

Looks like we are going to be stuck between 104 and 105 for awhile.

Faudra attendre les ordinateurs quantiques ^^

[...]

Quantum Computer capable of implementing Shor's algorithm against 256 bit keys (ECC protecting bitcoin addresses) is far beyond capabilities of current systems (we are talking about tens of thousands of qubits). It also requires the public key to be know.  A Bitcoin address is a hash of the public key, and the actual public key remains unknown until an address is used to send funds.  This is one reason why addresses shouldn't be reused.  While not bulletproof it would provide resistance to attack by QC during a transition to a stronger address type.  Bitcoin could be extended to support post-quantum cryptography.  As for QC being used to mine Bitcoins, generally speaking Shor's algorithm can't be used against hashing functions and symmetric encryption algorithms.  Lastly there is no known QC algorithm to solve the somewhat unique problem of Bitcoin mining.  Grover's algorithm can be used to reverse a single hash however it only produces a modest speed improvement and in mining Bitcoin one isn't looking for a single valid hash but rather a set which consists of quadrillions of valid hashes.  It is not a given that QC will EVER provide a superior/faster/cheaper method of solving blocks.

Old wallets are not a problem.  You wouldn't even need to keep the wallet in any particular form.  The private keys for the address(es) holding the funds is all that is needed.  Bitcoins never expire, and private keys don't go stale.  In may help to think of the Bitcoins not in your wallet but being on every copy of the blockchain spread across tens of thousands of nodes.  Your wallet doesn't contain Bitcoins it contains the keys which allow you (or your heirs) to spend those Bitcoins.  As long as the key remains uncompromised coins can be spent as long as the network exists.  I would recommend generating a set of kepairs offline (there are utilities to accomplish this and then storing the private keys and corresponding addresses on more than medium in more than one location (i.e. a MDIC in a home safe, and paper printout in a safety deposit box).

[...]