Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire 24.com network.

Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.


Flaws found in privacy-protecting software

25 July 2014, 07:03

San Francisco - Researchers have found a flaw that could expose the identities of people using a privacy-oriented operating system touted by Edward Snowden, just two days after widely used anonymity service Tor acknowledged a similar problem.

The most recent finding concerns a complex, heavily encrypted networking program called the Invisible Internet Project, or I2P. Used to send messages and run websites anonymously, I2P ships along with the specialised operating system "Tails", which former US spy contractor Snowden used to communicate with journalists in secret.

Though a core purpose of I2P is to obscure the Internet Protocol addresses of its roughly 30 000 users, anyone who visits a booby-trapped website could have their true address revealed, making it likely that their name could be exposed as well, according to researchers at Exodus Intelligence.

"People shouldn't trust something wholeheartedly just because Snowden says," said Exodus vice president Aaron Portnoy. "Generally, we assume the things we can find, others can find."

Tails launches from a DVD or USB stick and is designed to maintain privacy even when a computer or network has been hacked.


Much more than I2P, Tails relies on Tor, the better-known anonymity system that it uses for all software connections to the internet.

But leaks in the past year have shown that Tor is also a major target for the US National Security Agency and others, and researchers at Carnegie Mellon University said they could have identified hundreds of thousands of Tor users.

Those researchers planned to detail their technique in August at the security conference Black Hat. After Tor developers complained to Carnegie Mellon, the university told Black Hat to cancel the talk.

Tor programmer Roger Dingledine conceded that the researchers had found a flaw, and he said his team was now working to fix it before any public disclosure exposes dissidents and other types of users on Tor to greater risk of attack.

The I2P flaw will likewise be fixed. A spokesperson for the I2P project said the group of developers was still analysing the Exodus report.

Tails did not respond to an e-mail seeking comment. It was not clear how many Tails users would have been vulnerable without Exodus' co-operation, since the I2P application does not launch automatically when the operating system is opened.

Exodus is one of a dozen or more companies known to sell secret security flaws to intelligence agencies, law enforcement and other customers in a controversial marketplace.

Government client

But in this case, Exodus alerted I2P and Tails to the problem and said it would not divulge the details to customers until the problem has been fixed. Portnoy declined to say what the company would do if a government client asked him to find a similar flaw in the future.

The Tails and Tor episodes show that no anonymity system is failsafe, Portnoy said, and those in jeopardy should focus on compartmentalising their efforts so that a single breach would not expose everything about them.

"Tor works for most purposes, but a determined adversary will always find a way," he said.

In one such high-stakes case, the FBI used a flaw in a Firefox web browser that came bundled with Tor to identify a man suspected of hosting child pornography, according to Irish media reports.

Leaked NSA documents show that the NSA logged the IP addresses of many Tor users and may have scanned e-mails for users living outside of the US and its four closest intelligence allies, German media reported.

- Reuters


Read News24’s Comments Policy

Comment on this story
Comments have been closed for this article.

Read more from our Users

Nigeria @ 56: Words to my green f...

A leader’s job is not to dictate, but rather to be respected, admired and be a trustee, of the land we love, with so much potential, a land which should be freer than free. Its still a long way to fufilling our destiny! Read more...

Submitted by
Isaac Asabor263
Recession: An opportunity for Nig...

The recession should be seen as an opportunity for the country’s promotion as long as we all collectively conduct ourselves in a patriotic manner, writes Isaac Asabor.  Read more...

Submitted by
Black and White

We want to imitate the whites in everything because we are ignorant of our inherent originality and content. We spend all our Naira to acquire his inventions because we so oblivious of our natural endowments that we allow him have it for free. Read more...

Submitted by
Nate Nat
Adamawa State University Mubi: A ...

ADSU integrity forum has accused the Sunday Joshua Wugira, a lawyer, of adopting unorthodox tactics by abusing his privilege by attacking the integrity of ADSU Vice Chancellor Dr. Moses Zira Zaruwa, writes a News24 reader. Read more...

Submitted by
Abdulsalam Jubril
My Country Nigeria (Part One)

Poetry by Abdulsalam Jubril.

Submitted by
Abdulsalam Jubril
Recession, dearth in leadership a...

Every leader has the opportunity to become great and making himself immortal in the lives and hearts of people for generations to come. Will Mr. President seize this opportunity?, questions Abdulsalam Jubril. Read more...