Delivery-Date: Fri, 13 Feb 2015 11:16:53 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID,UNPARSEABLE_RELAY,
	URIBL_BLOCKED autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 7E5661E0700
	for <archiver@seul.org>; Fri, 13 Feb 2015 11:16:48 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 73F9D332D5;
	Fri, 13 Feb 2015 16:16:45 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 4633D3328B
 for <tor-talk@lists.torproject.org>; Fri, 13 Feb 2015 16:16:41 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id toOp2k8kaa_Y for <tor-talk@lists.torproject.org>;
 Fri, 13 Feb 2015 16:16:41 +0000 (UTC)
Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 21A24332D1
 for <tor-talk@lists.torproject.org>; Fri, 13 Feb 2015 16:16:41 +0000 (UTC)
Received: from plantcutter.riseup.net (plantcutter-pn.riseup.net [10.0.1.121])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
 by mx1.riseup.net (Postfix) with ESMTPS id 6289140E19;
 Fri, 13 Feb 2015 16:16:38 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1423844198; bh=7RpFALghomepj2GmtgoPVJTg15gKE/6QNGavHl8GowU=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date:From;
 b=KWmTZHcJwdrfG0zXec81FCJj07e6lf3lYnZGEQhVGUj1+wz4ulVSVx7B4T7JoE/9u
 Rrd3wnkfYnowZ0xhKjCXdHOlapLR6YZ3uFHrZGXbXnxk6/M944C7jKQOQQ+3hybpAr
 SEKNWLU8qLzMXYH9+zN/uAqENRcQcBfxvaSC7fG4=
Received: from [127.0.0.1] (localhost [127.0.0.1])
 (Authenticated sender: desnacked) with ESMTPSA id 36A81224CB
From: George Kadianakis <desnacked@riseup.net>
To: Virgil Griffith <i@virgil.gr>
In-Reply-To: <CADop2NFwg+mViiRWWZWYQo4S8m+d87U10LrvAsQZmuGHTBOGjQ@mail.gmail.com>
 (Virgil Griffith's message of "Wed, 11 Feb 2015 13:10:54 -0800")
References: <CADop2NFwg+mViiRWWZWYQo4S8m+d87U10LrvAsQZmuGHTBOGjQ@mail.gmail.com>
User-Agent: Microsoft Outlook Express 6.00.2900.5843
Date: Fri, 13 Feb 2015 16:15:24 +0000
Message-ID: <87r3ttpz37.fsf@riseup.net>
MIME-Version: 1.0
X-Virus-Scanned: clamav-milter 0.98.5 at mx1
X-Virus-Status: Clean
Cc: "tor-talk@lists.torproject.org" <tor-talk@lists.torproject.org>
Subject: Re: [tor-talk] Funded search engine for onionspace?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Virgil Griffith <i@virgil.gr> writes:

> I present:
>
> http://onion.city
>
> currently searching ~348,000 pages according to site:onion.city on GOOG.
>
> -V

Ah, exciting!

The use of a custom google search is an interesting idea. I also like
the motto and the logo! (although search engine logos are supposed to
be colorful right?)

Some comments:

- How does the custom google search thing works? Where does it get its
  index? You expose all the tor2web onions on your sitemap, so google
  crawls them and generates an index?

  I'm a bit concerned that clients connect directly to Google. Can
  this be avoided and still keep the custom google search functionality?

- I don't like that the default link is through onion.city. This means
  that onion.city watches *both* the search query *and* the content of
  the communication. That's crazy.

  It's especially crazy if you allow your clients to submit HTTP forms
  over onion.city, since it basically means that onion.city gets to
  see *all* the usernames and passwords. I bet there are many people
  out there who don't really get the tor2web threat model, and it's
  nasty to read their passwords.

  There are various ways to solve or semi-solve this problem. My
  preference is to *always* default to the onion link (and maybe also
  have an option for a tor2web alternative). Combined with a nice
  guide on how to download Tor, this might help user education and IMO
  it's the responsible thing to do.

- How do you crawl for more onions?

- It really needs HTTPS!

- Are you planning to also index non-HTTP services?

- Serving onion.city as a hidden service would be nice.

- Curious on the funding model here. Will there be ads?

Thanks and best of luck with your project!
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

