3 ms·

Is there added security by stacking hidden services? So a.onion is just a reverse proxy for b.onion? Buys you a bit more time before the final server gets poppe

Is there added security by stacking hidden services? So a.onion is just a reverse proxy for b.onion? Buys you a bit more time before the final server gets popped? Or can you increase the number of Tor hops for your hidden service to get a similar effect? Thinking of Silk Road - was it ever proved they leaked their IP versus some more advanced way of finding the server? (I know, it's highly likely that such a poorly written system would have had a real IP leak, just wondering what documented facts we have.)

at-fates-hands 11y ago
The investigators claimed they found it when the login page leaked its IP. It was one of the more contested facts of the case - some thought it was possible, other infosec people thought it wasn't. There are stories that say Ulbricht was notified by someone in one of the chat rooms that the site was leaking IP addresses, but Ulbricht never fixed it, which allowed the FBI to find the real server in Iceland. Wired did a great two part article on the story: http://www.wired.com/2015/04/silk-road-1/ http://www.wired.com/2015/04/silk-road-1/ More articles on the leaky login page: http://www.wired.com/2014/09/the-fbi-finally-says-how-it-legally-pinpointed-silk-roads-server/ http://www.wired.com/2014/09/the-fbi-finally-says-how-it-leg... http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/ http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leak... http://www.theregister.co.uk/2014/09/08/leaky_captcha_behind_fbis_silk_road_rapture/ http://www.theregister.co.uk/2014/09/08/leaky_captcha_behind...
- NoMoreNicksLeft 11y ago
  This conversation shouldn't happen without first talking about "parallel construction". https://en.wikipedia.org/wiki/Parallel_construction https://en.wikipedia.org/wiki/Parallel_construction We know they've tapped every fiber there is, in closets and undersea. It would be simple to use timing attacks at that point. Given that they had the means, and the lack of principles to use those means, why would we believe it was anything else? We don't have to invent absurd scenarios, nor should we believe anyone else's inventions.

at-fates-hands 11y ago

The investigators claimed they found it when the login page leaked its IP. It was one of the more contested facts of the case - some thought it was possible, other infosec people thought it wasn't. There are stories that say Ulbricht was notified by someone in one of the chat rooms that the site was leaking IP addresses, but Ulbricht never fixed it, which allowed the FBI to find the real server in Iceland. Wired did a great two part article on the story: http://www.wired.com/2015/04/silk-road-1/ http://www.wired.com/2015/04/silk-road-1/ More articles on the leaky login page: http://www.wired.com/2014/09/the-fbi-finally-says-how-it-legally-pinpointed-silk-roads-server/ http://www.wired.com/2014/09/the-fbi-finally-says-how-it-leg... http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/ http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leak... http://www.theregister.co.uk/2014/09/08/leaky_captcha_behind_fbis_silk_road_rapture/ http://www.theregister.co.uk/2014/09/08/leaky_captcha_behind...

NoMoreNicksLeft 11y ago
This conversation shouldn't happen without first talking about "parallel construction". https://en.wikipedia.org/wiki/Parallel_construction https://en.wikipedia.org/wiki/Parallel_construction We know they've tapped every fiber there is, in closets and undersea. It would be simple to use timing attacks at that point. Given that they had the means, and the lack of principles to use those means, why would we believe it was anything else? We don't have to invent absurd scenarios, nor should we believe anyone else's inventions.