3000 is insanely few exit nodes.

In many countries, running an exit node is a very fast way to have cop knocking at your door and seizing all your stuff. To run a tor exit node, you either have to try your best to stay anonymous, preferably be based in a country who don't care at all about cyber crime, and run them on a dodgy hosting provider who dgaf. Or you have to create a legal entity, either a non-profit or a company, depending on the country register as a hosting provider (so that you are not consider legally responsible for what comes out of your server if you abide by some rules), and you will still have to respond pretty fast to any police inquiry.

If anything, it's a miracle that there is 3000 of them. Although you can safely assume that a good portion of them (if not the majority) are operated by state intelligence services, cybersecurity companies and bad actor, who will log everything that pass through their node (and might be able to decrypt them one day).

▲

BorisMelnik 5 hours ago | parent | next [-]

agree I think tor is such a cool technology but even the thought of what is getting routed through there on my machine or even a machine I rent is enough for me to stay away from it

▲

burningChrome an hour ago | parent | next [-]

I watched Adrian Crendshaw's DefCon talk about how people got busted using Tor and have also stayed away since then. I have used it in conjunction with TAILS a few times, but other than that, I don't mess with it any more.

DEF CON 22 - Adrian Crenshaw- Dropping Docs on Darknets: How People Got Caught

https://www.youtube.com/watch?v=eQ2OZKitRwc

▲

dmantis 4 hours ago | parent | prev [-]

You don't route anything by default, you have to explicitly enable it if you wish to help the network.

And relay operators (not exit nodes) don't face any issues. Don't let the unreasonable fear blind you.

	▲	antonymoose 27 minutes ago \| parent \| next [-]
		I once worked at a very pro-hacker firm (USA) - our CTO, good as he was, once tried to migrate our Ubuntu based servers to BSD, this being a very high tier performance oriented HFT firm, purely on his love of the distro. A good dozen engineers in a team of 50 ran relays, one bold fool ran an exit node and was falsely fingered for CSAM type crimes during my tenure. The net effect was no one ran relays anymore. The poor exit operator remains an Irish to this day because he has dozens of headlines about his arrest and none about the dropped charges.
	▲	adrianN 4 hours ago \| parent \| prev [-]
		At least here in Germany I believe you’re on very shaky legal ground even if you’re just running a relay.

▲

gambiting 3 hours ago | parent | prev [-]

US government literally has a gigantic data centre purely for the purpose of storing encrypted data traffic that might be decoded one day. We can only assume that anything going through any US controlled TOR node ends up there.

▲

InsidiousWombat 42 minutes ago | parent | prev | next [-]

Because running one will get your machine blamed for any illegal activities that Tor users are up to. I ran one for whole 2 weeks, before my hosting provider just told me "pls stop".

Also depending on country you might be accused by aiding them, and it would be upon you to explain the court you have no control who uses the exit node nor their ID

▲

Spivak 6 hours ago | parent | prev | next [-]

Well yeah, because running an exit node in the US is "probably legal but there's precedent for still getting arrested and having your stuff seized." I can't imagine very many normal people are willing to paint a target on their backs like this.

	▲	Palomides 5 hours ago \| parent \| next [-]
		plus becoming the technical target of every spy agency and tons of random hackers! likely the most trouble you can bring to your computers legally
	▲	6 hours ago \| parent \| prev [-]
		[deleted]

▲

malfist 6 hours ago | parent | prev | next [-]

It's insanely few, but also isn't that possibly an advantage? When lots of people's transfers are intermingled that means the possibility of separating out one person's traffic from the rest is harder.

	▲	maxbond 5 hours ago \| parent \| next [-]
		Those user's traffic is cleanly separable at the destination, so this attack is always possible from some vantage point and isn't a defensible position. So malicious exit nodes are the real threat. Your reasoning would apply better to guard nodes.
	▲	jacquesm 6 hours ago \| parent \| prev [-]
		No, it makes it much easier.

▲

ghostbrainalpha 5 hours ago | parent | prev [-]

So one person single-handedly knocked out 10% of the entire Tor exit network over an SSH port redirection?

	▲	jakzurr 3 hours ago \| parent [-]
		10% were compromised. The author contacted the Tor Project's network health team, who "made an announcement to the operators, who began shutting their exit nodes down."