Delivery-Date: Fri, 07 Nov 2014 09:19:28 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id B1AAA1E0AAF;
	Fri,  7 Nov 2014 09:19:26 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id BEF4A30FF6;
	Fri,  7 Nov 2014 14:19:20 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id AE04E2DA17
 for <tor-talk@lists.torproject.org>; Fri,  7 Nov 2014 14:19:16 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 97kpb1DbvKh4 for <tor-talk@lists.torproject.org>;
 Fri,  7 Nov 2014 14:19:16 +0000 (UTC)
Received: from smtp-gw11.han.skanova.net (smtp-gw11.han.skanova.net
 [81.236.55.20])
 by eugeni.torproject.org (Postfix) with ESMTP id 5ADC929E70
 for <tor-talk@lists.torproject.org>; Fri,  7 Nov 2014 14:19:16 +0000 (UTC)
Received-SPF: softfail (smtp-gw11.han.skanova.net: domain larsluthman.net does
 not designate 78.73.33.144 as permitted sender)
 identity=mailfrom; receiver=smtp-gw11.han.skanova.net; client_ip=78.73.33.144;
 envelope-from=mail@larsluthman.net; helo=[192.168.1.101]; 
Received: from [192.168.1.101] (78.73.33.144) by smtp-gw11.han.skanova.net
 (8.5.142.07) id 5435B84900925921 for tor-talk@lists.torproject.org;
 Fri, 7 Nov 2014 15:19:12 +0100
Message-ID: <1415369941.14332.2393.camel@miskatonic>
From: Lars Luthman <mail@larsluthman.net>
To: tor-talk@lists.torproject.org
Date: Fri, 07 Nov 2014 15:19:01 +0100
In-Reply-To: <20141107125239.GB4364@work>
References: <20141107125239.GB4364@work>
X-Mailer: Evolution 3.4.4-3 
Mime-Version: 1.0
Subject: Re: [tor-talk] Darknet Sites Shutdown
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============8577266861957071942=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>


--===============8577266861957071942==
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-nvTihCwXXfg4BDOFUasU"


--=-nvTihCwXXfg4BDOFUasU
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, 2014-11-07 at 12:52 +0000, spaceman wrote:=20
> I can't believe that 400 sites all made stupid mistakes thus revealing th=
eir=20
> identity. Therefore they must have had an exploit that they are using to =
take=20
> down all these sites (either in tor or some other application).

The article claims 400 sites but only 17 arrests, which could indicate
that some individuals were running many, many hidden services, in which
case a few mistakes would be enough. That's how I would do it if I
wanted to take over the online drug market*, create a couple of dozens
of sites with slightly different designs, rules, and clienteles so that
people think that there is lots of diversity, and then sit back and let
the transaction fees flow in. Doesn't matter if twenty sites fail as
long as one succeeds, and the users have no way of knowing that the
failed sites and the one they trust are operated by the same people.

That doesn't mean that there _isn't_ an exploit. We will probably never
know the details.


--ll

* I don't.

--=-nvTihCwXXfg4BDOFUasU
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
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=uqcW
-----END PGP SIGNATURE-----

--=-nvTihCwXXfg4BDOFUasU--


--===============8577266861957071942==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============8577266861957071942==--

