6 ms·
A New Tor Search Engine
- amrrs 9y agoHow did it just directly topped the HN Frontpage? - with no comments and just 8 points, submitted 12 minutes ago? I'm scared in the age of ransomware!
- Tenoke 9y agoBy getting 8 points in 12 minutes during a quiet time..
- amrrs 9y agoI think the definition of quiet time might be something do with Timezone bias and I don't know if HN has peak times and Quiet times - writing this from IST 4:29PM. My concern was more of 'Tricking the system?'
- corobo 9y agoIf it helps any it was posted just before lunch UK time (which is why I'm here, hello!)
- column 9y agobon appétit
- Tenoke 9y agoNight time in the US (especially California) has always been a quieter time. I live in Europe and when I am regularly checking HN I can often tell when it's start of working time in the Bay based on the front page. You can do a quick analysis but my observation is that stories on the front page during west coast night time are significantly more stale (submitted more hours ago) and/or with less points. Something getting near the top during that time with ~10 points is nothing unusual (especially if the upvotes happen this fast). Edit: Also moderator intervention is a much more likely hypothesis than 'tricking the system' on average on HN, but this case is well within the norm so I wouldnt suspect that.
- hanbura 9y agoThe major quiet time is about 8am - 14am UTC. The difference is very pronounced
- p4bl0 9y agoIt wasn't able to find my homepage. I guess it crawls a finite list of hidden services. There doesn't seem to be a way to submit an url however.
- jstanley 9y agoIt didn't find mine either
- p4bl0 9y agoHahaha, the dark background and the picture with your eyes hidden just next to your name written in big is awesome :D.
- INTPenis 9y agoRead more links are 404 on your dark blog. Same if you click the header. Seem they forget the /blog/ part of the path.
- gebruikersnaam 9y agoIt adds '.casa' to each link, maybe that's the problem?
- jstanley 9y agoUh oh, thanks for letting me know. I will try and rectify this.
- ssijak 9y agoIt appends additional .casa when I click on the links from the search, like <some_onion_link>.casa.casa so it does not work without removing one manually.
- jamarukato 9y agoYou can use it directly via Tor Browser - http://abikogailmonxlzl.onion http://abikogailmonxlzl.onion
- etiam 9y agoGood to know. I notice it isn't supporting https. Isn't that risky when connecting through Tor?
- heinrich5991 9y agoNo. Traffic to .onion domains is encrypted end-to-end, with the server's public key hashing to the domain name.
- Arkanosis 9y agoBoth of you know it already, but it might be useful to remind the casual reader that while this is indeed not needed for tor hidden services, you still need https for regular web services accessed through tor (in some way even more than when not using tor). This interactive explanation by the EFF is worth a thousand words: https://www.eff.org/fr/pages/tor-and-https https://www.eff.org/fr/pages/tor-and-https
- xcopy 9y ago..............
- ComodoHacker 9y agoTOR hidden services is an Internet realm where people go for privacy. A search engine for it with Google Analytics attached looks like a grim irony to me, not to say mockery.
- jamarukato 9y agoI guess the GA script is attached by onion.casa, not by the search engine itself.
- p4bl0 9y agoI can confirm that. The GA scripts are installed by the gateway, I don't have them when directly connecting to the .onion.
- ComodoHacker 9y agoEven so, this may get people in trouble. I've just tattooed some nonsense over keyboard and got search results related to CP. Thanks God it haven't shown me image previews! They better show a warning about gateways.
- baby 9y agoI think most people here fail to realize how correct your comment is. The only security you get from visiting a TOR hidden service is from knowing exactly what is its URL. You can't trust the URL you see from a web engine. The reason is that the onion address of a TOR hidden service is actually a hash of its public key. The TLS connection you have with the TOR service is only verified by you knowing the exact URL you've typed in your TOR browser. Without this you could be visiting a fake onion address which would be man-in-the-middling you and the real onion address you're trying to visit. Probably this is the real purpose of the advertised search engine.
- p4bl0 9y ago> I think most people here fail to realize how correct your comment is. I think you are assuming a lot about what people here thinks. The author of the comment you are referring to thought that the GA scripts were set up by the search engine, which is not the case. The gateway actually includes GA scripts, and if people want real privacy they don't use a gateway they can't trust (or they would be accessing it over Tor anyway, thus hiding who they really are for the gateway and for GA). > The only security you get from visiting a TOR hidden service is from knowing exactly what is its URL. Well, no, that's not the only security you get. There is also encryption and hidden IP address for example. Depending on your threat model it could be totally okay not to know who you are visiting. "Random" example: if you are using a search engine to discover new hidden services, you can't know their names in advance anyway… > The TLS connection you have with the TOR service It doesn't really work like that (and it's written "Tor" not "TOR" btw). > Probably this is the real purpose of the advertised search engine. Now you are accusing this service of trying to MITM its users based on nothing. Especially since you didn't seem to bother verifying if the GA scripts were actually set up by the search engine (which they aren't).
- Cakez0r 9y agoHow does it work? What's advanced about it?
- wybiral 9y agoYeah, it seems like a normal search engine to me. But with more scams and fringe stuff in the results. Edit: For context, the title used to say "Advanced Tor Search Engine"
- jamarukato 9y agohttps://abikogailmonxlzl.onion.link https://abikogailmonxlzl.onion.link seems to work better...
- silur 9y agoThis one stinks. Top 2 drug market disappear and a new search engine with fairy tale like timing shows up, with google analytics included, SSL by GlobalSign? Nope nope nope
- p4bl0 9y agoThe GA scripts are not installed by the search engine but by the onion.casa gateway. Idem for the ssl certificate. Also, the "fairy tale timing" may be explained as simply as "Tor stuff were on the news recently so some people got (re)interested in Tor stuff" :).
- coretx 9y agoYeah. That would be "implied security". The default go-to for intelligence people. It would be stupidly naive to think we can beat them at the meta game. Eternal vigilance; disregarding any foreign information influencers safeguards you better against being subverted.