Here [1] is some research on enumerating hidden services. It would be shocking to me if no one would regularly enumerate hidden services given how cheap it may

Here [1] is some research on enumerating hidden services. It would be shocking to me if no one would regularly enumerate hidden services given how cheap it may be. We have demonstrated that collecting the descriptors of all Tor hidden services is possible in approximately 2 days by spending less than USD 100 in Amazon EC2 resources. As far as I know this will no longer work because Tor implemented appropriate changes but there are probably other ways to do it. [1] http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf