News for hackers. Stuff that matters.

A comment on Global Web Crackdown Arrests 17, Seizes Hundreds Of Dark Net Domains. Parent comment

Re:Global Web Crackdown Arrests 17, Seizes Hundreds Of Dark ... by mike-cardwell on Friday November 07, 2014 @09:45AM (#8572678)
They don't have to break Tors crypto to figure out where hidden services are. They just need to identify which IPs are consistantly connected to the Tor network, and then prod them and see if the hidden service goes offline.

That is one of the reasons why you're absolutely not supposed to run a relay from the same IP that you run a hidden service from. Because your IP is published if you do that.

If I were to run such a service, I would want to make sure that the IP that the hidden service is running from has as little connection to me as possible.

[edit] If it were my full time job to locate Tor hidden services, I'm pretty sure I could make a decent go of it. Certainly for a lot of them. Given the resources the NSA and GCHQ have, I have to believe that they can do a much better job of it.

[ Parent | on HN ]
Re:Global Web Crackdown Arrests 17, Seizes Hundreds Of Dark ... by mike_hearn on Friday November 07, 2014 @01:30PM (#8573924)
You don't even need to take them offline. Just send them a lot of traffic: done.

QUANTUM + XKEYSCORE + some MapReductions would make mincemeat of this problem.

[ Parent | on HN ]
Re:Global Web Crackdown Arrests 17, Seizes Hundreds Of Dark ... by venomsnake on Friday November 07, 2014 @10:00AM (#8572766)
Actually a relay will be awesome way to mask a hidden service, if TOR encryption holds.
[ Parent | on HN ]
Re:Global Web Crackdown Arrests 17, Seizes Hundreds Of Dark ... by mike-cardwell on Friday November 07, 2014 @11:38AM (#8573319)
No, it is an extremely bad idea to do that:

http://cybermashup.com/2013/09/04/dont-run-a-tor-router-and-...

And something a little more "official" from https://www.torproject.org/docs/tor-hidden-service.html.en -

"It is generally a better idea to host hidden services on a Tor client rather than a Tor relay, since relay uptime and other properties are publicly visible."

[ Parent | on HN ]