Email or username:

Password:

Forgot your password?
Top-level
blackfire

@adam very much depends if the company has a reason to use Tor. If its not a requirement then its a vulnerability to have it available. Exfiltration of data from a compromised account or infiltration of any number of attacks from a tor based host.

1 comment
Adam

@blackfire

That is incorrect. Allowing Tor users to access your site is not a vulnerability.

Blocking Tor is not going to stop attackers from exfiltrating data. That's just a fact.

Blocking Tor will not stop an attacker from launching attacks.

It doesn't actually solve the problem.

If an organization wants to block Tor, that's their right. Just like it's their right to sell people's information in accordance with their privacy policy, or ban people who are critical of them.

Go Up