Warning: Last releases of Tor degraded its anonimity level compared to I2P

[rekomople]

the FBI set with one of I2P devs

Only One of numerous developers living around the world, but not the whole I2P project. There two I2P clients, written in Java and C++, which are developed by independent developers living in non-allied countries.
Tor Project, as a whole, claims they are police collaborators.

First, this was about onion services. Not using Tor as a client.

Second, they used deprecated software. Easily avoided mistake.

Third, no details are known.

Germans themselves say the details:

However, reporters from Panorama and STRG_F were able to speak to people who have independent knowledge of the widespread monitoring of such Tor servers. The number of surveilled Tor nodes in Germany is said to have risen sharply in recent years. The recorded data also suggests that these are likely to be used for ‘timing analyses’. Experts who were able to view research documents from Panorama and STRG_F independently confirmed the research results. Matthias Marx, one of the spokespersons for the Chaos Computer Club (CCC), explains: ‘The documents in conjunction with the information described strongly suggest that law enforcement authorities have repeatedly and successfully carried out timing analysis attacks against selected Tor users for several years in order to deanonymise them.’

Tor Project responded that the reason for that de-anonymization had been the use of their software without Vanguard:

From the limited information The Tor Project has, we believe that one user of the long-retired application Ricochet was fully de-anonymized through a guard discovery attack. This was possible, at the time, because the user was using a version of the software that neither had Vanguards-lite, nor the vanguards addon, which were introduced to protect users from this type of attack. This protection exists in Ricochet-Refresh, a maintained fork of the long-retired project Ricochet, since version 3.0.12 released in June of 2022.

However, a local Whonix forum user @JesusLucas found that Vanguard was effectively broken by Tor developers some nine months ago and all this time successful de-anonymization attacks were possible.