He goes on to explain that he is a journalist writing about Tor. He also tells us that he bets that the CIA and the Italian Secret Service are going to have moles there. What he obviously meant to say was “I work for the CIA and I’ve been watching you now for quite some time.”

It’s possible that he didn’t actually work for the CIA. His name and photo checked out under the website he claimed to write for. It was probably just a one-time job. Even if this isn’t true, even if a network of government spies didn’t track my position across Europe just to meet us in a restaurant, his comment set the tone for my weekend in Florence.

Tor is serious business.

What the hell is Tor?

Did I mention Tor yet?

Tor is a program that makes you anonymous. This means that, for better or for worse, the big brothers, neighborhood hackers, and ad agencies of the world can’t tell what you are doing on the Internet without going through a lot of effort and expense.

Is that too abstract? Here are some illustrative statements. *Taps the microphone*

• A Tor user walks into a bar, the bartender says “who are you?”
• How many Tor users does it take to screw in a light bulb? Only a few, but you’ll never know who did it.
• I used Tor last night and now my wife says that she doesn’t even know who I am any more.

I’ll be here all night.

If you use Tor you become Spartacus. Tor takes everything you do, makes it look exactly like what everyone else is doing, and gets random computers on their network to do the talking for you. Ta-da! Now it is practically impossible to pin an action on you.

The Original Need

I bet you wouldn’t have guessed that this idea was invented by The U.S. Navy. You would have? Oh.

Put on your paper sailor hat and I’ll explain. Imagine you are the king of the Navy and you’re going to war with your fleet of a thousand brand new Navy cars (I don’t really know how the Navy works). Being king, you are in the most important car of all because you’re calling the shots. You don’t want the enemy to know which vehicle is yours. You also don’t want them to know who is receiving orders because that could give away your tactics.

“I know,” you say, “I’ll encrypt everything so that they can’t see the content. Then they won’t be able to tell that my broadcasts are more important than others.”

Unfortunately for you, the enemy has fancy technology. They can’t decrypt messages but they are able to track where everything comes from and where it is going. They can’t tell what you’re saying, but they have all they need.

After about 5 minutes you think you’re doing well. Half of the enemy cars are already on fire! Yours explodes. “How did they do that?” you say in the afterlife. “Easy,” responds god, “they were able to see that your car was sending out the most messages. They knew exactly where you were.” Then he slaps you with a piece of linguini and drifts away.

To prevent this from ever happening again the Navy decided to invent the concept of an “Onion Network” (not to be confused with The Onion Network). Now instead of having packets go directly from point A to point B, each one randomly hops around the fleet first. Because of encryption, the enemy can’t tell the difference between a new message and a “hop” message — they all look the same. It’s like running an invisible sprinkler in a thunderstorm.

Suddenly nobody but the sender and the recipient can figure out the end points of a message chain. Even the middle men (the ones doing the hops) don’t know the path. Each piece of the hop — each “layer” of the message — is encrypted with a different key, so the only thing a relay knows is who gave them the package and where it should go next.

Onions have layers too, that’s why this setup is called an Onion Network. Get it? It’s like Shrek!

Trolls use the Internet, Ogres use Tor. (Illustration by Anne Buckwalter)

What’s it Good For?

Tor has applications in the real world. You can buy drugs and guns, share illegal pictures, and hire assassins. Oh wait, I’m just describing Tor’s reputation (more on that later). Seriously, there are a lot of important situations where people have moral and compelling reasons to want anonymity.

Here are a few:

• Protecting witnesses and victims of domestic abuse. Anyone who wants to be able to access the internet without being discovered by a third party can use Tor to defend against their stalkers.
• If you don’t like being tracked by your government, Internet Service Providers, or search engines.
• Providing truly anonymous tips. There are times when people need or want to share information against the wishes of powerful and potentially dangerous forces (e.g. mafias, governments, or corporations).
• Safely bypassing censorship. If you live in Syria, China, or The United States of RIAA/MPAA, you might use Tor to access content from the outside world more safely.

These kinds of reasons explain why organizations with very good reputations, like the Knight Foundation, are devoting resources to Tor.

The Dark Web

What I’ve just described is a spin on the way people access normal information online. If you point Tor Browser to Google you will see the same old Google, it’s just that now Google doesn’t know who you are. That’s powerful enough, but there’s more: Tor also lets you see hidden content on the Internet.

Using Tor is like entering a cheat code into real life and playing the lost levels. It is the digital equivalent of platform 9 and 3/4. This secret section of the Internet is possible because Tor users can serve content anonymously too.

If you don’t know much about how the Internet works, believe me when I say that if a web site’s location is hidden it becomes essentially impossible to access. It would be like trying to visit someone’s house without knowing anything about where they live — not even the country. Tor gives you a blindfold and leads you there. You still don’t know where the house is, but at least you can visit.

Anonymous sites are accessed through something called an “onion address,” which is made up of a series of random letters and numbers. For instance, this is a “clean” version of Tor’s wikipedia: 3suaolltfj2xjksb.onion. Feel free to try clicking the link, it won’t work (Unless, of course, you are using the Tor browser).

Note: even if that link worked you wouldn’t see any terrible images. However, you need to use your brain before you start actually clicking around if you don’t want to get really upset.

That random looking string is used to find the server within the Tor network. Because the addresses don’t point to a real address on the Internet, there is no way to fully access this content without Tor. There are services you can use to get there without using Tor, but you lose all benefits of anonymity and content is often censored.

Onion addresses are the most fascinating part of Tor, albeit the most potentially disturbing. Rest assured that they don’t all lead to child porn, guns, and drugs. For example there is a secret version of Twitter, a bunch of blogs, a search engine, and an email service. There is even a secret version of 4chan (called Torchan), which I won’t link to because that one does lead to child porn and drugs.

These types of content networks—ones that are served on top of the normal web so that you need special programs to reach them—are known as the Dark Web. Not necessarily because the content is darker (it is), but because it is hidden from view and can’t really be searched and scraped as reliably.

Implications of The Dark Web

Most uses for Tor become more potent with onion addresses. Anonymous servers are just as protected from higher powers as anonymous users. If Amazon suddenly started selling illegal drugs they would get in trouble. If a Tor marketplace started selling illegal drugs, the law would have to figure out a way to find them first.

This power applies to legitimate uses as well. If a government official wanted to contact The Boston Globe with a corruption leak, he or she could use Tor to create a gmail account anonymously. The government could then subpoena Google, and Google might be willing to give away the information they have. They won’t know much, but now things like account access patterns and full email logs would be fair game.

If the official had used Tormail then even Google wouldn’t know what happened. The government would have no course of action because there would be no service provider to ask. Every journalist in the world should be able to agree that there is no good reason for a watchdog to trust the organizations they are watching. Why should you trust in corporations and governments to keep sources safe?

Tor has a reputation because it has a lot of criminal content, but the social good that it supports is just so important (criminals will always be criminals). I’m working on a game called Torwolf to simulate a few situations where Tor would be effective (if you have played Werewolf or Mafia, you can start to imagine what the game will be like). In the mean time, read up on Tor if you’re curious. Better yet, go try it out.

IMPORTANT EDIT: while Tor is much better than nothing, it is neither foolproof nor perfect. If maintaining anonymity could be a matter of life / death / imprisonment, then you need to know more than what I could fit into the scope of this overview. This paper is a good starting point, but seriously, spend some time researching on your own.

Non-nerds, read this first

For the non-techies reading this I have some explaining to do.  When you have more than one computer connected together you form something called a Local Area Network (LAN).  For instance, you have a LAN if you have more than one computer connected to the internet at home.  Computers on networks like to communicate to one another and so they have an address on the network called an IP address, which is a series of numbers (e.g. 192.168.1.100).

If you know the IP of a computer, you can send messages to it.  The problem is that normal people won’t remember all those numbers, and most of the time those numbers actually change when you turn the computers on and off.  For these reasons, most Operating Systems let you name your computers and they do the translation for you.  This probably happened the first time you turned it on and it asked for a name.

For average users the name will be something like “Living Room PC” or “Dad’s Laptop.”  The more tech savvy tend to enjoy goofing around with these names; for instance my friend Julia named one computer “Red” and the other one “Rum.”  Once you get more than a few computers, though, you naturally move toward a theme for your network.  This makes computers more fun, like collections, and gives the buckets of bits and bolts a touch of personal flair.

Here are some examples: you might use the planets in the solar system (I would never do this; who wants to have to wait for the discovery of new planets to buy your 9th computer?), or famous scientists or sports players.  Or Pokemon!  Or musicians.

For most people it stops there, but I recently realized that you can do oh so much better.  Your network names can be truly meaningful.  For instance, name your computers based on elements on the periodic table.  Mobile computers are given gas names and desktops are heavy metals.  Maybe the number of electron clouds reflects the number of processor cores!  Creativity is key

Long story short, some metaphors are better than others, and, quite frankly, I have found the best one.  My theme is StarCraft; an incredibly popular strategy game which has every single feature you could want in a network naming convention.   The game features 3 different races and about 70 units with a variety of shape, size, and function.  Well look at THAT!  It turns out there are 3 main flavor of operating system, and I plan on owning about 70 computers with a variety of shape, size, and function.

Back to the point

My network is named based on StarCraft/StarCraft2. The name of the unit should reflect the power, size, and special abilities of the hardware. To some extent this is an art, however there are a few set rules which must be followed.

Rule 1: Flying vs Ground

Starcraft units, in general, can either fly, or they are stuck on the ground.

Computers, in general, are either mobile (laptops), or they are stuck on the ground.

Summary:

• Laptops and other wireless devices are flying units.
• Boxes that are not inherently mobile are ground units.

Rule 2: Race

Starcraft has three main races: Zerg, Protoss, and Terran.  Zerg are the icky gooey alien race (think “Alien” alien); Protoss are the super intelligent shiny sleek technological aliens (think ET);  And Terran are the more traditional space age humans.

Computers have three main operating systems: Unix, OSX, and Windows;  Unix is the icky, gooey nerd computer (think “command lines”);  OSX (Mac) is the super pretentious shiny sleak technological computer (think Unibody Macbook); And Windows is the more traditional normal day human computer.

Starcraft also has other kinds of creatures in the universe.  Loveable animals called critters which mindlessly roam around, and mostly unknown super beings called the Xel’Naga.

Computers also have other kinds of operating systems in the universe.  Random things like the Wii which are based on who knows what, and the mostly unknown Google OS called Crome OS.

Summary:

• Unix / Linux varieties is Zerg
• Windows is Terran
• Mac is Protoss
• ChromeOS is Xel’Naga
• Other is Critter

Rule 3: Non-computers

The real world has tech that aren’t computers, and Starcraft has things that aren’t units (buildings are another type of object in StarCraft.).  Anything that doesn’t have an Operating System like Windows or Unix but can still have a network name (e.g. a shared computer peripheral like a printer or disc drive) or is a piece of tech that you want to be able to easily reference in casual conversation should have a building name. Ideally the building would be a non-unit producing structure (buildings are what make the units in Starcraft), unless of course the hardware in question is something that is used directly to produce computers.

Examples from my network

• Zergling – A tiny little zerg unit that runs around all the time || A tiny little  Ubuntu box that runs all the time
• Overlord – a zerg unit that isn’t used in combat but instead floats around and feeds other units || A unix based Network Attached Storage (NAS) that isn’t often used directly but instead hosts data and media for the other computers.
• Goliath – A pretty standard terran “mech” unit which isn’t insanely powerful, but packs a reasonable punch || A pretty standard Windows PC which isn’t insanely powerful, but packs a reasonable punch
• Thor – A big-ass giant warrior zoid type of suit thing (think transformer style) || A big-ass giant computer case (although currently in hibernation)
• Viking – Terran unit that replaced the goliath in StarCraft2; it can transform from flying to being on the ground || Erek’s Windows desktop (same build as my Goliath desktop) but it also has a wireless card!
• Wraith – !%*#ty flying Terran unit || Erek’s !%*#ty laptop
• Dark Templar – Stealth Protoss ground unit, it is invisible to the naked eye || Stealth Apple mac mini, it is invisible to the naked eye
• Corsair – Sleak and thin air unit for Protoss || Sleak and thin Macbook Air 11″
• Scout – Standard Protoss air unit || Macbook 13″ — pretty standard Apple laptop
• Interceptor – a tiny Protoss air unit that gets launched from a bigger “Carrier” ship || a tiny iPod Touch which you plug into bigger computers
• Kakaru – A flying critter || A Wii with wireless connection
• Spore Colony – A zerg building that spews out spores || A printer plugged into the NAS that spews out paper and ink.
• Pylon – The protoss building which provides energy to other protoss buildings || An Uninterruptible Power Supply (UPS) which provides energy to all my computers.

Feel free to adopt this naming convention. If you have a perfect fit on your network post the name here!

Amazing Opportunities

The nice thing about this convention is it makes you want to buy / build technology just to have the perfect fit for a unit.

For instance:

• Apple AirPort named Carrier
• Macbook Pro 19″ (doesn’t exist… YET) named Mothership
• A partitioned box with unix and windows. Windows OS named Marine, Unix OS named Infested Marine
• A unix box dedicated to masterminding trojan attacks called Infestor
• USB based unix install named Larva
• Two apple computers called High Templar 1 and High Templar 2 which can combine to form an Archon.

The potentials are limitless!