3 ms·

I wonder how they got the location of the web server. They started getting images on July 23rd. Once they had the location of the web server and were getting

• Sanddancer 13y ago
  He was caught by not using TOR to access the server to admin it, he used pretty straightforward ssh and vpns, which are a lot easier to track. They had a good suspicion that he was DPR from looking around at forum postings and the like, and the server was just the final dot that was connected.
• pbhjpbhj 13y ago
  Isn't it well known that USA secret services have been operating a large part of the TOR network [or am I falling to conspiratorial banter]? By analysing traffic flow as they access SR - eg by also having access to major carriers - wouldn't they be able to just push in packets and see where they pop out (to be facile about it)?
  • jes5199 13y ago
    They may (or may not?) control TOR exit nodes, but that's different from controlling the TOR network as a whole. While it's possible to watch traffic exiting TOR onto the clear web, it's harder - still presumed impossible - to find a hidden service within TOR.
    • pbhjpbhj 13y ago
      The traffic on the physical layer has to exit to the server housing the service though surely. The hidden service isn't distributed is it? I read in another thread that they're reported to have hacked PHP to expose a vulnerability that gave them an admin IP address that was being allowed through the firewall. Seems reasonable.