4 ms·
Most of them do that now - the better markets have gateways that are CAPTCHA'd and spread out over other providers that then proxy to the real hidden service (y
by wp381640 6y ago
Most of them do that now - the better markets have gateways that are CAPTCHA'd and spread out over other providers that then proxy to the real hidden service (you can do this with a second step over Tor again)
Checkout this project which is now being more widely deployed to prevent a lot of these attacks:
https://github.com/onionltd/EndGame https://github.com/onionltd/EndGame
- chromedev 6y agoPretty cool, but you'd think they would just have a Dockerimage ready to be deployed and a network driver or something similar for these types of challenges.
- iudqnolq 6y agoHope this password advice isn't taken seriously > TORAUTHPASSWORD - Password which is used for your Tor Control Port Authentication with NGINX. Alphanumeric without spaces (example: passwordIcanremembertyping) > KEY - Alphanumeric Key for the shared front session key. Random between 64-128 would do fine. (example: isthis64charactorsalreadyicantbelieveitwowsocoolwaitnotyetohdarn)
- anon9001 6y agoVery cool. I clicked a bunch of links from there and got to here: https://github.com/mikeperry-tor/vanguards/blob/master/README_SECURITY.md https://github.com/mikeperry-tor/vanguards/blob/master/READM... Good overview of threats.