September 11, 2006

German police seize 'anonymizing' Tor servers

Police block an undisclosed number of servers during a crackdown on Internet pornography

In a crackdown on Internet child pornography, German police detected several servers running a copy of Tor, a software designed to anonymize Internet usage.

"We seized or blocked an undisclosed number of servers during a raid, which is still underway," Jens Gruhl, a spokesman for the public prosecutors office of Konstanz, Germany, said Monday. "A few of these computers had installed copies of Tor."

Users of Tor software in the country, worried about an unexpected visit by the police, have decried the move in a flurry of blogs.

"This situation is disturbing, really disturbing," wrote Alexander Janssen, from Düsseldorf, Germany, in a blog post. "I run a Tor server myself and the last thing I want to experience is the police kicking down my door [and] seizing my computer."

Gruhl said German crime officials are not specifically searching for servers running Tor but for servers distributing child porn. "That fact that police discovered copies of Tor is coincidental, not intentional."

In his blog, Janssen reckoned that the seized servers were configured to be so-called Tor "exit nodes," allowing their IP (Internet Protocol) addresses to show up in the server logfiles in question.

Tor was created to defend against traffic analysis, a form of network surveillance that "threatens personal anonymity and privacy, confidential business activities and relationships and state security," according to the Web site www.tor.eff.org.

The software bounces communications around a distributed network of servers, called onion routers, protecting users from Web sites that build profiles of their interests, local eavesdroppers that read data or learn what sites they visit, and even the onion routers themselves.

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.