3 ms·

Why must this be malicious? It could be a researcher, or someone interested in building a hidden service index, etc.

eksith 12y ago
I was thinking the same thing. In the reply too, this is mentioned : https://lists.torproject.org/pipermail/tor-talk/2014-September/034752.html https://lists.torproject.org/pipermail/tor-talk/2014-Septemb... you shouldn't assume HSDir is private in any case; and if enumeration is truly a concern, fast flux onions is a thing. these are location hidden, not existence hidden :)
- userbinator 12y ago
  Indeed, it could just be someone trying to make the equivalent of a search engine. Perhaps these "fast flux onions" should be called "green onions". :)
  - meowface 12y ago
    Not "could", more like "probably is". There are myriad researchers and enthusiasts who crawl hidden services. You can find a bunch on Twitter and reddit. This is very likely not related to Op Onymous.
baddox 12y ago
> To know about such TorHS address the attacker must be running a malicious Tor Relay acting as a TorHS Directory, with Tor's code modified to dump from the RAM memory the TorHS list, then harvest them with an http client/script/crawler. Given that, I think a case could be made that even doing this for research is acting in bad faith, if not "malicious."
- patzerhacker 12y ago
  Tor hidden services announce their existence to their introduction points. The fact that they exist is not something Tor tries to hide. What they do try to hide is the location of these services. Basically, if you don't want people to know that you're running a service over Tor then you're relying on a guarantee that isn't there. If you want to hide your location while announcing that you're running a service then you're relying on a guarantee that Tor actually claims to provide. If this is research then given the above how is it "in bad faith" or "malicious"?

I was thinking the same thing. In the reply too, this is mentioned : https://lists.torproject.org/pipermail/tor-talk/2014-September/034752.html https://lists.torproject.org/pipermail/tor-talk/2014-Septemb... you shouldn't assume HSDir is private in any case; and if enumeration is truly a concern, fast flux onions is a thing. these are location hidden, not existence hidden :)

userbinator 12y ago
Indeed, it could just be someone trying to make the equivalent of a search engine. Perhaps these "fast flux onions" should be called "green onions". :)
- meowface 12y ago
  Not "could", more like "probably is". There are myriad researchers and enthusiasts who crawl hidden services. You can find a bunch on Twitter and reddit. This is very likely not related to Op Onymous.

baddox 12y ago

> To know about such TorHS address the attacker must be running a malicious Tor Relay acting as a TorHS Directory, with Tor's code modified to dump from the RAM memory the TorHS list, then harvest them with an http client/script/crawler. Given that, I think a case could be made that even doing this for research is acting in bad faith, if not "malicious."

patzerhacker 12y ago
Tor hidden services announce their existence to their introduction points. The fact that they exist is not something Tor tries to hide. What they do try to hide is the location of these services. Basically, if you don't want people to know that you're running a service over Tor then you're relying on a guarantee that isn't there. If you want to hide your location while announcing that you're running a service then you're relying on a guarantee that Tor actually claims to provide. If this is research then given the above how is it "in bad faith" or "malicious"?