Delivery-Date: Tue, 05 Aug 2014 14:30:35 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 556131E0350;
	Tue,  5 Aug 2014 14:30:33 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 09EF1300DD;
	Tue,  5 Aug 2014 18:30:31 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 2B18B3001D
 for <tor-talk@lists.torproject.org>; Tue,  5 Aug 2014 18:30:27 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id arWWO8VJP3V3 for <tor-talk@lists.torproject.org>;
 Tue,  5 Aug 2014 18:30:27 +0000 (UTC)
Received: from trillian.krikkit.nl (rejo.zenger.nl [IPv6:2a02:898:24::2])
 (using TLSv1 with cipher AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id E79D030010
 for <tor-talk@lists.torproject.org>; Tue,  5 Aug 2014 18:30:26 +0000 (UTC)
Received: by trillian.krikkit.nl with esmtpsa
 (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.76) id 1XEjUz-0001ZS-Gd
 for tor-talk@lists.torproject.org; Tue, 05 Aug 2014 20:30:23 +0200
Received: by ix.home (Postfix, from userid 501)
 id 82AEA1BDF218; Tue,  5 Aug 2014 20:30:08 +0200 (CEST)
Date: Tue, 5 Aug 2014 20:30:08 +0200
From: Rejo Zenger <rejo@zenger.nl>
To: tor-talk@lists.torproject.org
Message-ID: <20140805183008.GO1414@ix.home>
References: <20140805143135.GM1414@ix.home>
 <20140805175837.GN1414@ix.home>
MIME-Version: 1.0
In-Reply-To: <20140805175837.GN1414@ix.home>
X-Trillian-Spam-Scanner: trillian.krikkit.nl
X-Trillian-Spam-Score: -0.0 (/)
X-Trillian-Spam-Score-Int: 0
X-Trillian-Spam-Report: result=No,
 score=-0.0 required=4.0 tests=NO_RELAYS version=3.3.2
Subject: Re: [tor-talk] dutch police crawling hidden servers
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============3294785174880453951=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>


--===============3294785174880453951==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="7Rldj+JZnTQmDdGi"
Content-Disposition: inline


--7Rldj+JZnTQmDdGi
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

++ 05/08/14 19:58 +0200 - Rejo Zenger:
>>  August 2011. Agents at the National High Tech Crime Unit of the
>>  Netherlands=E2=80=99 national police force had decided to crack down on=
 online
>>  child porn, according to an FBI affidavit. To that end, they wrote a web
>>  crawler that scoured the Dark Net, collecting all the Tor onion
>>  addresses it could find.
>
>How would they have done that? Of course, there are wiki's listing=20

The avidavit answers my question:

  In order to identify potentiai "hidden services" invoived in the=20
  distribution of child pornography, the NHTCU activaled a web erawier=20
  to search avaiiabie "hidden services" within the Tor-netwerk. A web=20
  erawier is a software program that can be used to automatically search=20
  for websites, identify any hyperlinks cantairred on those websites,=20
  and follow those hyperlinks to additionai websites. The NHTCU=20
  configured the web erawier to search for "hidden services" ending in=20
  ".anion" within the Tor network. Severai hundred "hidden services" we=20
  re identified and documented bythe NHTCU. Each of these "hidden=20
  services" was then manually reviewed by the NHTCU to determine whether=20
  it cantairred child pornography.=20
 =20
The typos are from the OCR.=20



<https://s3.amazonaws.com/s3.documentcloud.org/documents/1261620/torpedo-af=
fidavit.pdf>


--=20
Rejo Zenger
E rejo@zenger.nl | P +31(0)639642738 | W https://rejo.zenger.nl =20
T @rejozenger | J rejo@zenger.nl
OpenPGP   1FBF 7B37 6537 68B1 2532  A4CB 0994 0946 21DB EFD4
XMPP OTR  271A 9186 AFBC 8124 18CF  4BE2 E000 E708 F811 5ACF

--7Rldj+JZnTQmDdGi
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iQJ8BAEBCgBmBQJT4SKwXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBRDBERUIyRDQzNDk4MjU5QzI1MEU3MjQ4
OUI2RkU3REI2NjMzMTk3AAoJEIm2/n22YzGX03gQAIoSabdkKuBOBR/1+1/lWo1r
sTEkIpCY6KMUVoXfrhbjXLmvcOO6jC9Tz6ysVzfe6VhL5hhixlBHWyLK8/RoZL8d
RTLe0b8LcrVMH7n3BW0357dt1pEUgWqhC4I+MZKrQWUQ4I4+QB/2ZnYp//LFoqkK
BMjkX1375vZm37wJ/zu8AWl9r+ogu9NhoSCAX4W+aN/Ojmge2DtHf2mWDOGLCY9n
dBYkB4fUUNgB1g9Kqp0yWN9BfDQ0t+JUjhcCh4A1gwaBeVYMSz1ZFwueZtOjPCMh
V+d1DlWV96qF+9ae5aAzeo1iNK7OJK263iQvycaEp2RW5sF+ndwG3tRK9Jy/Z5DX
NIshXNHyckdjdo8YcE0AE75CF+QXXfMCesBPZKr4XW6eZul5jQelCjy1Em3L50KM
J4C1kf1awOET+OHv6pn/pJn/yba/Kmhaz7ufYMcYNuo9JKdV65gGQMQWd7g1rfc+
HHoGvafoNHhaw1UzRgmhJODuFzK0KtxJAeWadC5n/vfXWkduEQ5tunQvSIhGXUrw
VFQSw8TmPIGDXX77S7Ft5lhVCI+E/Q1DcZGXW3yoHg3l066wkwugIPS2V3iskqpB
Gn7kpU9fbrsQVeTAY0nEvbRTq/rApYnHiHoJuoaiX7QPuJjox7mb7aAE+uJ5eb6e
GVyiLvJD7+mzPWCvrDKn
=Fplf
-----END PGP SIGNATURE-----

--7Rldj+JZnTQmDdGi--

--===============3294785174880453951==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============3294785174880453951==--

