Tor: Anonymous Routing, Exit Relay Security and Trust Boundaries

Tor is a low-latency anonymity network that separates users from destinations through independently operated relays. ryo.news examines Tor's architecture, its use in cryptocurrency network privacy, timing and metadata analysis, and the operational risks associated with hostile or compromised nodes. Coverage includes research into Monero-over-Tor behavior and the October 2026 exit-relay incident in which researchers observed SSH traffic redirection. A malicious exit or forged SSH server identity does not, by itself, establish a break in Tor's encryption. Reporting distinguishes active interception tests, historical directory records, confirmed server infections and unknown victim outcomes, while comparing Tor's threat model with proposed high-latency mixnets.