Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Crime Software Businesses Communications Network Networking Privacy Security The Internet

Tor Project Confirms Sexual Misconduct By Developer Jacob Appelbaum (theverge.com) 410

An anonymous reader quotes a report from The Verge: The Tor Project, a nonprofit known for its online anonymity software, says it has verified claims that former employee Jacob Appelbaum engaged in "sexually aggressive behavior" with people inside and outside of its organization. "We have confirmed that the events did take place as reported," Shari Steele, Tor's executive director, tells The Verge. In a blog post today, Steele says that Tor began an investigation into Appelbaum's behavior after several people came forward with allegations of misconduct in late May. In a statement made in June, he said the allegations were "entirely false." He resigned from the Tor Project in May. "I want to thank all the people who broke the silence around Jacob's behavior," Steele writes. "It is because of you that this issue has now been addressed. I am grateful you spoke up, and I acknowledge and appreciate your courage." Steele says that Tor is now implementing a new anti-harassment policy, as well as a process for submitting complaints and having them reviewed. The changes will be put in place this week. Tor also announced last month that it would replace its entire board of directors.
This discussion has been archived. No new comments can be posted.

Tor Project Confirms Sexual Misconduct By Developer Jacob Appelbaum

Comments Filter:
  • Hatchet jobs aside (Score:2, Insightful)

    by Anonymous Coward

    Tor is backdoored. You can see that from the ease with which the Feds locate sites and users. Thus its one and only use: bringing free, anonymous, speech to people in repressive regimes, its ended.

    When a company first sacks someone facing no charges, then hires a PI to confirm their reason for sacking, even though he's not claiming wrongful dismissal. That pretty much tells you that the organization is stuff full of bad actors. They go beyond any allegations and into a hatchet job.

    And those bad actors deliv

    • by nonsequitor ( 893813 ) on Thursday July 28, 2016 @02:03AM (#52596965)

      I personally know some of the people that came forward, they had no agenda other than stopping a serial sexual predator / harrasser. I was sad when I heard the story break, but not surprised because Jake's an asshole if you're not somebody. Where somebody is defined as a person whose work he can steal, someone to intoxicate and lure into bed, or someone that can enhance his reputation.

      Shame on you for suggesting otherwise, and shame on the mods who modded you up.

      Whether or not Tor is backdoored or otherwise compromised is a totally different issue. As for something new made by trustable people, Jacob doesn't have the technical ability to do a project like this on his own, he's a charming sociopath that worms his way into the circles of people that can. Good for Tor to give him the boot and cleaning house of the people who turned a blind eye to his misconduct.

      • The problem is that the article is poop. It doesn't explain any of this. If you're going to can someone for something, then people want an explanation more nuanced than what is given in TFA. I think they deserve it, and they shouldn't depend on some random slashdotter to provide it. Frankly, the rest of us need this information so that we can make intelligent choices. If they know he's a shitheel but won't tell us specifically how, then they're doing us a disservice.

        They can't tell us "what he did" but they

      • by Khyber ( 864651 )

        "I personally know some of the people that came forward, they had no agenda other than stopping a serial sexual predator / harrasser."

        That sure as fuck isn't what I'm reading STRAIGHT FROM A SUPPOSED VICTIM'S MOUTH. [twitlonger.com]

    • Tor is backdoored. You can see that from the ease with which the Feds locate sites and users.

      Tor is open source, the project just manages the sources. You might be able sneak in some subtle exploits if you're in charge... but if the Feds are finding people it's more likely they've just set up a bunch of fake nodes.

      When a company first sacks someone facing no charges, then hires a PI to confirm their reason for sacking, even though he's not claiming wrongful dismissal. That pretty much tells you that the organization is stuff full of bad actors.

      Or the project is under intense scrutiny and suspicion so they want to cover their bases.

      And that is Jacob.

      These "we slept together and he licked my muff and that's rape because I didn't agree before hand he could lick my muff, only share the bed"...

      It's about consent, and sharing a bed with someone doesn't give you consent.

      Now in many cases that's an indication that they are interested, and in that case you can try to get consent. But just becau

    • by AmiMoJo ( 196126 ) on Thursday July 28, 2016 @03:45AM (#52597211) Homepage Journal

      Tor is backdoored.

      No. You don't understand what Tor is or what the vulnerabilities used by attackers are.

      Tor is secure. Where people have been located, it was due to bugs on the bundled browser and not following best security practices like disabling Javascript and not using a maximized browser window (to thwart canvas based fingerprinting). But the underlying network itself is secure.

      Don't mistake compromised Tor exit notes as flaws in the network. Tor was designed on the assumption that exit nodes would be compromised and are inherently untrustworthy. Even if you use Tor, you still need to encrypt the traffic leaving the exit node because, as the documentation makes extremely clear, the exit node can see everything that passes in and out of it.

      Once you understand what Tor is and the limits of what it does, you can see that it is highly effective and has proven secure.

      • by gweihir ( 88907 )

        And in addition, the TOR project explains all the ways you can de-anonymize yourself by mistake while using TOR. One of this things is trusting an exit-node.

      • by Kjella ( 173770 ) on Thursday July 28, 2016 @10:23AM (#52598887) Homepage

        Tor is secure. Where people have been located, it was due to bugs on the bundled browser and not following best security practices like disabling Javascript and not using a maximized browser window (to thwart canvas based fingerprinting). But the underlying network itself is secure.

        That or share too much information about yourself or your other online activity or download malicious content. It doesn't even have to be malware as such but say an MP3 where your media player tries to download cover art, any kind of functionality that could lead to non-TOR traffic. Or socially engineer you to visit a popular YouTube video in your ordinary browser using a special URL. It could be they have a exploit on core TOR, but in that case I'm guessing it's in the NSA vaults along with the AES backdoor.

        People don't understand the power of profiling and combinatorics. For example say you look at my posting history, I've probably casually mentioned my age a few times - let's say you have my birthday pinned down to a month even though I never said when it was. My sex too in some context, I presume. And I've at one point mentioned my country, my hometown (>150k) and that I used to live in the capital (>600k). If you have a post saying "I'm moving back home soon" that's enough to pinpoint me, if you have access to the right registry.

        How does that work? Well you have ~145k registered domestic moves. Only ~49k are between different parts of the country. In total there's about ~9k for my hometown, those are all public statistics. So about (49/145)*9k = 3k long-distance moves to my town, for argument we'll assume all are from the capital. If average lifespan is 80, my month is roughly 1/(80*12) of the total population so ~3 moves of people my age and ~1.5 if you add sex. If soon means the coming month you're down to 1.5/12 = ~1/8. Even with some non-uniformity and whatnot it'll probably be one, at most two.

        People don't stop to think about these things, particularly when it appears to happen in "private", but services get compromised. Or are honeypots to begin with. And even if you use PGP or some other secure channel, what used to be a buddy today can be compromised tomorrow. And this gets more and more important as we leave more and more "real world" electronic traces, like that concert you were at - were you also tagged on Facebook? In the past it would have been almost useless information, today a few such tidbits of information can easily lead to just having a handful of suspects to investigate closer.

        • by AmiMoJo ( 196126 )

          That's why I recommend using the Tails live CD. No danger of running anything else or automatic updates etc. Everything goes through Tor, and there is no permanent storage so no trace left after you power off. You still have to be careful, but it eliminates most of the problems associated with running Tor on a normal OS.

    • by gweihir ( 88907 )

      Actually, there is no evidence Tor is backdoored at all. The known attacks have all been explained nicely by verifiable vulnerabilities in other places and by entirely plausible user error. Seriously, stop spreading FUD.

    • by cryptizard ( 2629853 ) on Thursday July 28, 2016 @08:07AM (#52597999)

      Good people gone, bad people in

      Did you even read who the new board of directors is? Matt Blaze, an extremely respected academic cryptographer. Cindy Cohn, the director of the EFF. Bruce Schneier, a folk hero on Slashdot and no friend of the federal government. Stop fearmongering please.

  • by AbRASiON ( 589899 ) * on Thursday July 28, 2016 @12:04AM (#52596567) Journal

    Ever since gamergate my concepts of fair reporting, harassment, he said she said have been seriously adjusted. There was totally horrible people, saying horrible things, but it seems only one side of the story is ever reported, making people more and more jaded and cynical of the media.

    Stories such as Linus specifically having to avoid spending any time with females one on one as he's been "targeted for take down". Situations of outright false claims against people, proven clear and still people write incorrect articles about them, deliberately.

    This story may well be correct, however in the very very least, I will no longer blindly leap into "condemn them, silence them!!" mode as is intended. I am particularly skeptical when a "harassment policy" is put in place too, as those have been going a general indicator of people "meddling in the name of righteousness " regardless if there was even a problem in the first place.

    Be wise and if you read the article at least try to find multiple sources and preferably the other side of the story. At least GG taught me take stuff on the Internet with again of salt finally.

    P.s off topic , I used to see posts whining about how awful Slashdot mobile is, I thought the people were exaggerating. They aren't, it's a warcrime.

    • by s.petry ( 762400 ) on Thursday July 28, 2016 @12:29AM (#52596679)

      There is always a reason, though not always obvious. Tor is now shit, because the good people were chased away. Notice that there are no criminal charges anywhere, just allegations and accusations repeated over and over on any media outlet that would print it. Lead developer gone, whole new board being elected, one should be rather suspicious.

      Now for the tin foil hat: A whole lot of money and effort goes into taking over a project like Tor, and as we saw with the Snowden NSA leaks it is a global exploitation at least after the fact. China, the US, the UK, and just about everyone else suddenly has no problem finding people on Tor networks. All of those same groups can claim ignorance when the cat jumps out of the bag.

      Sometimes it's not easy to see who benefits and a clear goal. That is when you need to look around to see why you are being distracted.

      • by tsotha ( 720379 )
        Yes. For this reason I'm much more skeptical of allegations than I would if the same thing happened in a project for some random web framework.
      • Notice that there are no criminal charges anywhere,

        So? Most human interaction including dumping people is done without the need for criminal charges. People get permanently banned from things simply for breaking the rules of the organisation, and the police and courts need never get involved.

      • Re: (Score:3, Insightful)

        by AmiMoJo ( 196126 )

        Tor is now shit, because the good people were chased away.

        Complete bollocks. Name some of these "good people" who have left. The project founders and all the major technical contributors are still there, as well as many new ones.

        China, the US, the UK, and just about everyone else suddenly has no problem finding people on Tor networks.

        Also complete bollocks. The only known instances of this happening were via browser vulnerabilities, not problems with Tor itself. And those vulnerabilities could easily have been mitigated if people has set their browsers up properly, disabling Javascript as recommended.

        • by gweihir ( 88907 ) on Thursday July 28, 2016 @06:34AM (#52597649)

          Tor is now shit, because the good people were chased away.

          Complete bollocks. Name some of these "good people" who have left. The project founders and all the major technical contributors are still there, as well as many new ones.

          Indeed. Methinks that there is a PsyOps campaign running to make people go to less secure alternatives. If you cannot break it, try to make everybody believe it is broken instead.

    • by lucm ( 889690 ) on Thursday July 28, 2016 @01:19AM (#52596839)

      This is a two-way street. Sure, "targets" like Linus have to be careful, but it's becoming even more difficult for actual victims of male semi-celebrities because they are called liars and sluts on top of having gone thru an unpleasant experience.

      Have you seen how people treated the women who made those complaints against Assange?

      For some reason when it's tech-related celebrities there's a cloud of immunity and endless waves of defenders that have no more information, just strong opinions. We laugh at people who still defend Bill Cosby, but when it comes to Assange, Applebaum or even Gore it's a different story. It's smear campaigns, NSA operations, corporate greed, etc. It's never a fucking immature asshole who crosses the line.

      It's as if in tech there's saints and serial killers, nothing in between. Girl goes to a bar with a guy and guy puts his hands down her pants? He's just "hitting on her", she shouldn't have gone there if she didn't want it. Girl parties with guy, goes home with him, has safe sex with him, then wakes up from a booze blackout to find him fucking her without a condom? She asked for it, she shouldn't have been in his bed if she didn't want to give him a blank check to fuck her bareback while she's passed out. And/or she's a NSA shill.

      I've always being very skeptical of the whole "rape culture" thing, the switch rape and all that. Always figured it was people aspiring to some kind of heroic role in a society that has no real issues left. But the more I see the posts here about Applebaum and Assange, the more I'm questioning my own assumptions about how civilized we are.

      • by dbIII ( 701233 )
        Cells are full of people just like Applebaum is supposed to be. It's happened a lot before. Maybe it's just happening again.
        As for Assange vs Spooks, that was happening in little ways long before he went to Sweden so the chances of that strange case being mixed up with that are very high.
      • Re: (Score:2, Informative)

        by drinkypoo ( 153816 )

        Have you seen how people treated the women who made those complaints against Assange?

        I have. At least one of those women was beyond suspicious, both of them withdrew their support for charges, Assange asked if he needed to stay for questioning, was told no, left, and was told to come back, etc etc. Even if Assange is a total shitheel, that whole thing stunk to high heaven. It would be shocking if it didn't make people suspicious.

    • by dbIII ( 701233 )

      Linus specifically having to avoid spending any time with females one on one as he's been "targeted for take down"

      Where the hell did that come from?

      • https://www.google.com.au/sear... [google.com.au]

        I actually heard it on here.

        • Ah - Eric S. Raymond - enough said.
          While he's done a few things of note in one area he's a bit of a goose in others.
          See also his introduction of the word "Fisking" into the jargon file as an example of how utter full of shit he is at times when he has a political agenda to push - in that case opposition to anyone even mildly critical of Israel, in this case he's definitely been very upset with feminist politics on occasion instead of just ignoring something that's never going to impact on his life in any wa
          • Certainly possible he's full of shit, totally. Regardless things happen on both sides of this which is total dogshit lies but it seems only one side is apparently infallible, which is ridiculous.

            • by dbIII ( 701233 )

              Certainly possible he's full of shit, totally

              Read a few things he's written over the years to remove all doubt, especially the "Fisking" idiocy, but that "targetted" thing is even more ridiculous. Somebody he won't name says an org that no longer exists was going to play James Bond honeypot games? Seriously?
              You've been misled by the Lindbergh effect - somebody with fame in one area can push some ideas that are not exactly sane in other areas.

            • by dbIII ( 701233 )

              but it seems only one side is apparently infallible

              I never said that, and besides there is only one side here with Eric S. Raymond's claims that day.
              Nothing else to see so no other side to call a liar or not.
              Read his other stuff and make up your own mind - either fall for it or hone that bullshit detector.

        • consistent with reports of SJW dezinformatsiya tactics from elsewhere

          Note Eric's fucking huge chip on his shoulder from his wording. Expect bias.

          If true, these claims will rock the world of software development

          Notice how they didn't rock anything? Life went on and it's a year later. Maybe Eric's blog rant was just another of Eric's blog rants.

          If you are going to bring it up again I suggest you mention Eric's name instead of defaming Linus. I thought you were bringing up something new that actually invo

    • by dbIII ( 701233 )

      I am particularly skeptical when a "harassment policy" is put in place too

      Sadly once an org gets big enough you have to deal with the fact that some people will steal, some people will bully and others will grope. The policies to deal with all are mostly just common sense and referral to law enforcement unless you have HR people that like to micromanage or empire build.

    • What the fuck is "gamergate"? One of the "scandals" that got "-gate" tacked on to prove that any "scandal" that got "-gate" tacked on isn't really a scandal but some pig that has to be dressed up and lipstick'd to be even noticed?

      • Re: (Score:3, Funny)

        by dbIII ( 701233 )
        It was a girl writing about a shitty time she had at a convention and a lot of boys that never grew up getting offended by her daring to write that. So nothing of note but a lot was spilled over a small corner of the net and swilled over onto this site - stuff about "Mens Rights Activism" and how the right to insult teenage girls is written into the constitution or something.
  • by tgv ( 254536 ) on Thursday July 28, 2016 @01:09AM (#52596817) Journal

    That is one lousy article. The name of the guy is the only thing revealed, and that is a journalistic no-no IMO: you don't give the full name unless charges have been proven. By a judge. About the nature of his "misconduct", the article is very vague: it's couched in different terms, but it's never made clear what happened, when, where, in what context and who were the victims. It also focuses on the sexual transgressions, and only gives a fleeting reference to people being "humiliated, intimidated, bullied", without explaining why. I understand there is some sort of political battle that largely includes both sides in parallel, and that is not even hinted at. In short, it's bad journalism.

    • by nonsequitor ( 893813 ) on Thursday July 28, 2016 @02:09AM (#52596989)

      There are a variety of reasons this will never go to court, in part because of Jacob currently residing in Berlin. If you want the full stories, read them here.

      http://jacobappelbaum.net/ [jacobappelbaum.net]

      • by tgv ( 254536 )

        Thanks, that's a lot clearer. There's one clear case of sexual abuse, indeed, and while the rest is probably not criminal, it would be more than enough ground for firing him. He seems to be in desperate need of therapy.

    • by AmiMoJo ( 196126 )

      The situation they are faced with is that their staff are regularly harassed by law enforcement, so going that route is not really an option. The evidence is out there for anyone to evaluate themselves (google his name), and many of the victims have come forward publicly with their real identities.

      They can't just ignore this and they can't really take it to the police. FWIW no defence has been offered in the face of multiple, consistent and credible reports. It is what it is, but if you have a workable way

      • by tgv ( 254536 )

        That's not the issue: I thought the article was flimsy in the extreme. They could at least have provided a link to background information like the other reply did (https://slashdot.org/comments.pl?sid=9448003&cid=52596993). But instead, there is only a forest of links with vaguely worded accusations and denials.

        If someone has to go to the police, it's the sexual abuse victim, not the organization.

      • by bug1 ( 96678 )

        Not all problems have good solutions, but he is no longer part of the project, the board is being replaced, so those allegedly harassed have got their way.

        You say they are all regularly harassed by law enforcement, and that route is not really an option, so now Appelbaum faces harassment from law enforcement and vigilante's, what hope would he have of defending himself if he was innocent.

        You cant claim the high ground if you take the law into your own hands.

  • by piojo ( 995934 ) on Thursday July 28, 2016 @01:22AM (#52596855)

    What is "sexual mistreatment"? I can't find any info in the article, or the link within that was purported to contain more information.

    Given that this kind of accusation can permanently prevent someone from finding work in their field, I find these articles--lacking details, with no formal legal proceedings--troubling.

    • by MightyMartian ( 840721 ) on Thursday July 28, 2016 @01:52AM (#52596933) Journal

      A company doesn't need to wait for formal legal proceedings to terminate someone, particularly if they have an existing set of policies surrounding sexual misconduct.

    • http://jacobappelbaum.net/ [jacobappelbaum.net]

      The website explains their reasoning for not going to a court of law, which was why the TOR foundation hired a private investigator to confirm their veracity.

    • Legal proceedings are not up to a company, but only up to people involved. I worked at a place where 2 employees were caught having intercourse in a spare room. Both were let go for sexual mistreatment despite not being a criminal or legal issue in the slightest. One then sued for wrongful dismissal and lost that case. You don't need to do something criminal to be fired.

    • by AmiMoJo ( 196126 )

      Details here: http://jacobappelbaum.net/ [jacobappelbaum.net]

      There were formal proceedings, the Tor Project organization investigated. It's difficult to involve the police because many of its members are regularly harassed by law enforcement and some are wanted in various countries. It's likely that there is a grand jury investigation in the US into Appelbaum himself for involvement with the Snowden leaks, for example. The victims live in different countries too, although there are some in Germany where Appelbaum currently resi

  • by _Mr_Dude_123 ( 4660179 ) on Thursday July 28, 2016 @03:18AM (#52597145)
    Did anybody wonder if there is something funny with Shari Steele? - her husband is working with the NSA. and probably works/worked for the NSA: https://bvass.wordpress.com/ta... [wordpress.com] https://en.wikipedia.org/wiki/... [wikipedia.org]

The Tao is like a glob pattern: used but never used up. It is like the extern void: filled with infinite possibilities.

Working...