On 01/13/2014 11:32 AM, Zack Weinberg wrote:
Assume a person under continual surveillance.
If they have to reveal their true IP address to Wikipedia in order to
register their editor account, the adversary will learn it as well,
and can then attribute all subsequent edits by that handle to that
person *whether or not* those edits are routed over an anonymity
network.
If you start with that assumption, then it is unreasonable to assume
that the endpoints aren't /also/ compromised or under surveillance.
Editing Wikipedia is an inherently public action, if your security or
life is in danger from editing it, then TOR will protect neither because
even if you had 100% confidence in every possible exit node (which is
most certainly false), it does nothing to protect the endpoints.
What TOR may be good at is to protect your privacy from casual or
economic spying; in which case going to some random Internet access
point to create an account protects you adequately.
-- Marc