Man Found Guilty of Child Porn, Because He Ran a Tor Exit Node::undefined

  • Raisin8659@monyet.cc
    link
    fedilink
    English
    arrow-up
    122
    ·
    edit-2
    1 year ago

    They convicted him on “supporting the transfer of underage pornography”, i.e. he ran an exit node that “allowed” the upload of CP to an Austrian image hoster. Apparently, he wasn’t protected because he ran the exit as an individual, not a registered company. Most likely, the Austrian authority checked who uploaded the images, and found his IP address, which became the basis for convicting him. He didn’t have any of the materials because all those stuffs were encrypted in transit.

    He mentioned that law that was used to prosecute him was changed a few weeks later to protect individuals as well. He apparently now ran Tor exits under an offshore company.

    In summary, from what he said, he just happened to run an unrestricted exit node that some people used to upload CP.

    • lenninscjay@lemm.ee
      link
      fedilink
      English
      arrow-up
      24
      ·
      edit-2
      1 year ago

      AFAIK you should never run one on your personal IP

      Edit, wasn’t a personal IP. I mistook it when I read his apartment got raided. Advice still stands tho.

      • cyberpunk007@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        There will still be a trail. Even if you’re renting a server. Who’s CC is on file? Unless you want to waste your time buying prepaid visas. And even at that, they could track it to the retailer and find out which CC was used to order that. And even if you went in person, there’s likely video footage. Etc etc etc. It’s incredibly hard to remain hidden nowadays.

  • gleph@lemmy.world
    link
    fedilink
    English
    arrow-up
    39
    arrow-down
    1
    ·
    1 year ago

    He was convicted (and given probation) for supporting the transfer for Child Porn, not for accessing it or creating it.

  • tvbusy@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    15
    ·
    1 year ago

    I read in one of VPS rental service Discord that someone rented a VPS to run tor exit node and HDDs of the server were confiscated without prior notice.

  • dunestorm@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    1 year ago

    This is insane! It’s like prosecuting a postman for delivering child porn content to a customer.

  • Proofofnothing@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    7
    ·
    1 year ago

    Sorry I am not very techy, can someone eli5 what is an exit node? What is the point of running an exit node? Should the user have known his exit node (not sure if i am using the term right) could be used for cp?

    • Helluin@feddit.de
      link
      fedilink
      English
      arrow-up
      29
      arrow-down
      1
      ·
      edit-2
      1 year ago

      if you join the tor network other tor users proxy their trafic through a chain of tor users and therefore maybe though you, sometimes youre the exit node that then actually sends the request to the server in question, sometimes you just pass it on to another tor user.

      so the person in the OP did technically send the reques to the server that served CP, but he didnt really have anything to do with it nor could he have even accessed the data.

      • Regular Human@lemmy.world
        link
        fedilink
        English
        arrow-up
        18
        ·
        1 year ago

        Just to clarify, running an exit node is not something that happens automatically when you browse via tor. It’s something intentional that you configure

    • ryannathans@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      edit-2
      1 year ago

      One would not expect an exit node to be used for cp. A relay node would be more likely used for cp as one would expect the request to be internal to the tor network. A tor exit node is only used to access sites on the regular internet, not the “dark net”

  • nyakojiru@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    11
    ·
    1 year ago

    I don’t care if he was guilty or if the government whatever, the post title makes me sick already.

  • HousePanther@lemmy.goblackcat.com
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    45
    ·
    1 year ago

    This is why I won’t do anything of the sort. With the increasingly authoritarian state that Amurica is turning into, I will tread very carefully. Including using VPN. I don’t know much about Tor and perhaps I should learn more but my understanding is the traffic is largely plain text and not encrypted. Please correct me if I am wrong.

    • BadRS@lemmy.world
      link
      fedilink
      English
      arrow-up
      79
      ·
      1 year ago

      It’s encrypted, encrypted many times over, it’s completely anonymous… as long as you’re staying inside the network. An exit node connects to the regular internet and that’s what’s going to start showing up on logs. This was completely secure for the people actually dealing in cp.

      I can’t believe this stuck, it’s the equivalent of arresting a business owner because someone distributed cp while connected to their Wi-Fi.

      • HousePanther@lemmy.goblackcat.com
        link
        fedilink
        English
        arrow-up
        19
        arrow-down
        2
        ·
        1 year ago

        It’s quite possible he had either a public defender or a poor attorney. I am friends with an attorney who works with the poor, indigent, and people otherwise unable to fight for themselves. I help him out for free when he has questions related to technology and IT. I really need to read up on Tor because there might come a time when I’ll need to assist my friend in a similar matter. It’s quite chilling that the state could potentially punish a business owner for providing a free service like WiFi. I have another friend who runs a the neighborhood sports bar and she offers WiFi to her customers. I think I need to implement some content filtration for her so as to prevent her from potentially getting blamed for a crime she did not commit.

      • db2@lemmy.one
        link
        fedilink
        English
        arrow-up
        8
        ·
        edit-2
        1 year ago

        Which has probably happened. It’s (shady uses, not necessarily this use) one of the reasons there was a big push to get consumers to put a password on their wifi back in the day.

      • sloppy_diffuser@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        8
        ·
        1 year ago

        Not completely secure. If the same entity controls the entry and exit nodes (any maybe also relay?), it is my understanding that traffic can be traced back. Low probability, yes, but not completey.

    • astral_avocado@programming.dev
      link
      fedilink
      English
      arrow-up
      23
      arrow-down
      2
      ·
      edit-2
      1 year ago

      Tor

      is largely plain text

      Lol maybe do the barest amount of researching before commenting on something you know nothing about?

    • Jamie@jamie.moe
      link
      fedilink
      English
      arrow-up
      15
      ·
      1 year ago

      The high majority of websites are HTTPS, which means that the contents of requests are end to end encrypted. Technically if it’s just HTTP, it’s plaintext, but basically no sites operate outside of HTTPS anymore.

      All that stuff about everything you do being in the clear is outdated, and basically just VPN propaganda. The only parts of typical web browsing that aren’t encrypted are DNS resolutions, but DoH and encrypted DNS are starting to be a thing. In which case, your ISP/gov will know you’re accessing your bank’s site, but not what you’re doing on there because everything else is encrypted.

      Tl;Dr: Everything being plaintext is really outdated and is basically VPN propaganda. The majority of network traffic for most users is end to end encrypted already.

      • HousePanther@lemmy.goblackcat.com
        link
        fedilink
        English
        arrow-up
        9
        ·
        1 year ago

        That is not completely true. Often the payload is encrypted but not the metadata. It is the metadata that usually is the cause of privacy issues.

        • Jamie@jamie.moe
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          1
          ·
          1 year ago

          I think you might misunderstand what metadata is. The type of metadata you might be referring to are simply tracking methods employed on webpages by the likes of Facebook, Google, and other advertisers. But those are encrypted as well, they’re not open to view by anyone in the middle because they also utilize HTTPS. The vulnerability they pose is the potential for that data to be given up, or subpoenaed on the database end. There is no magic unencrypted data sent when dealing with accessing a website except, as mentioned, possibly the DNS query, which can be easily encrypted via DoH.

          Except, VPNs and Tor aren’t even magic bullets for privacy. The moment you log into a service, you lose your veil of privacy if your activities can be reasonably linked. To really remain private, you would need to use Tor Browser, likely over a VPN, preferably on a live booted system like Tails, and forego any usage of JavaScript or account logins. Doing anything different exposes you to tracking methods. Which removes you from using the majority of the Internet.