Tor for Privacy Researchers: Infrastructure for Studying Censorship and Surveillance

OONI (Open Observatory of Network Interference) is the standard platform for censorship measurement research. OONI Probe runs on distributed infrastructure collecting measurements of website accessibility, DNS blocking, traffic manipulation, and middlebox detection across hundreds of countries. Running OONI Probe on VPS infrastructure in censored countries (with appropriate legal review) contributes to the global dataset. Researchers building custom censorship measurement systems often use Tor as the comparison channel - a URL accessible through Tor but blocked on clearnet demonstrates ISP-level filtering. Research in countries like China requires careful legal analysis as unauthorized censorship measurement may violate computer crime laws.

Active research on Tor network performance, circuit construction, and relay behavior requires controlled measurement environments. Running experimental Tor clients that instrument circuit building, latency measurements, and bandwidth allocation allows empirical study of network behavior. Shadow - a discrete-event network simulator - enables large-scale Tor simulations without deploying to the live network, important for experiments that could harm live users (e.g., studying congestion attacks). Research involving deployment to the live Tor network requires ethical review - active experiments that could degrade user experience or compromise anonymity must not be conducted without Tor Project approval and community consent.

Studying surveillance systems (commercial spyware, lawful intercept platforms, traffic analysis tools) requires controlled environments where real user data is not at risk. VPS infrastructure in isolated network segments allows reverse engineering of surveillance software, traffic analysis experiments, and study of evasion techniques. Tor provides the measurement reference - if Tor evades a surveillance technology being studied, that establishes a privacy baseline. Researchers studying FinFisher, NSO Group, or state-sponsored surveillance tools should ensure their research environment cannot expose real users to the surveillance systems under study.

Developing new pluggable transports to circumvent censorship is an active research area. Geneva (Genetic Evasion) uses evolutionary algorithms to discover packet transformations that evade censorship. This research requires testing against real censorship infrastructure - China's Great Firewall, Iran's filtering systems, Russia's TSPU - using controlled VPS instances in those countries or accessible from those networks. Bridge research also includes studying bridge blocking patterns: how quickly are newly distributed bridges identified and blocked? What characteristics of traffic or server fingerprints trigger blocking? This empirical research directly informs better transport designs.

Privacy research using Tor must adhere to strict ethical standards. Research that passively observes Tor network traffic at the relay level to study anonymity properties faces significant ethical questions - even metadata from relay-level observations can de-anonymize users. The Tor Project's research safety board reviews proposals for research involving the live Tor network. Research that analyzes publicly available data (consensus documents, relay descriptors, OONI measurements) without capturing user traffic is generally ethically straightforward. Studies requiring traffic capture at relays controlled by researchers must carefully scope what is captured, immediately anonymize data, and obtain IRB approval.