Re:DARPA Has Open-Sourced 'Dark Web' Search Tech
by mirimir on Sunday April 19, 2015 @06:45PM
(#9405192)
This is wonderful news. Information (including Tor onion services) wants to be freely findable ;)
Obscurity should never be the major aspect of OPSEC.
Even with the sorry state of Tor onion services, sites can authenticate users at both network level, using the "stealth" authorization protocol, and application level. Of course, prudent users will use end-to-end encryption for sensitive information. And they'll consider carefully before sharing.
All of the "hidden markets", by the way, are little more than honeypots in waiting, enticing customers to pwn themselves.
Obscurity should never be the major aspect of OPSEC.
Even with the sorry state of Tor onion services, sites can authenticate users at both network level, using the "stealth" authorization protocol, and application level. Of course, prudent users will use end-to-end encryption for sensitive information. And they'll consider carefully before sharing.
All of the "hidden markets", by the way, are little more than honeypots in waiting, enticing customers to pwn themselves.
Edit: See Roger Dingledine's reply in the "Clarification of Tor's involvement with DARPA's Memex" thread on tor-talk <https://lists.torproject.org/pipermail/tor-talk/2015-April/0....