Live data from Hacker News

Running a Dark Web pedophile honeypot

geekslop.com

21–30 of 185 posts

Re: Running a Dark Web pedophile honeypot

#21
post #7

Some of the technical points of this article are simply wrong... > The exit node IP address of the user was easily obtained using the two different methods discussed briefly above. This is really not a vulnerability but simply how tor, and the internet at large, works - hidden services by design protect the service not the user (the user is protected by tor by default) - what the author actually did here was "leak" t…

facetious: treating serious issues with deliberately flippant humor.

Re: Running a Dark Web pedophile honeypot

#22
post #19

Earlier quoted context omitted.

> In this particularly disturbing case, a father of three hints that he is willing to share pictures of his children. > npt@hotmail.com: hi im a married dad of 3, i prefer girls from pt to jb. I’m looking forward to joining in and sharing in the community A little later in the article there is an entire section devoted to his findings that many visitors of the site were predators seeking to do more than look at photo…

Isn't that pretty much what the author was doing? Offering child porn to people on tor? How do we know the people contacting him weren't trying to honeypot him ?

> None of the websites contained any illegal content. Since I am not a legal authority (nor an expert in the law), I had to scale back the content. No illegal pictures nor files existed on any of the sites. In fact, each site contained exactly one image – a decorative background image to give the site a bit of flair (hidden service sites are notoriously lean). None of the honeypot sites explicitly offered to provide illegal content and instead, served to lure the user in by a vague promise of what may be found behind the locked door. Admittedly, this was a huge disadvantage over a FBI-driven honeypot and likely the reason why many visitors did not register and quickly moved on after landing on the home page.

Later on he explains,

> Scans on the server dropped and some of the users who opted to run the software appeared to be government or private researchers.

Re: Running a Dark Web pedophile honeypot

#23
post #19

Earlier quoted context omitted.

Isn't that pretty much what the author was doing? Offering child porn to people on tor? How do we know the people contacting him weren't trying to honeypot him ?

> None of the websites contained any illegal content. Since I am not a legal authority (nor an expert in the law), I had to scale back the content. No illegal pictures nor files existed on any of the sites. In fact, each site contained exactly one image – a decorative background image to give the site a bit of flair (hidden service sites are notoriously lean). None of the honeypot sites explicitly offered to provide…

If he wasn't explicitly offering child porn then how can he assume people who visited his honey pot were looking for child porn if they didn't explicitly state it? Sure the guy offering pictures seems like a pedophile, but what about the others?

Re: Running a Dark Web pedophile honeypot

#24
post #13

"pedophiles use encryption, so encryption is the devil." seems to be where this is going. That's a slippery slope and a bit unethical to use pedophiles to push an authoritarian political agenda. I bet it's fun to call all his critics pedophile sympathizers and sit upon a moral high-horse of self-righteousness while pushing his authoritarian ideology under the guise of social justice.. That's the thing about these peo…

Also terrorism and hackers (of the black-hat kind.) I've even been called one when I tried to argue against the proliferation of closed, walled-garden systems that seem so common today.

That reminds me, Freenet has an interesting stance on this:

https://freenetproject.org/faq.html#childporn

Re: Running a Dark Web pedophile honeypot

#26
post #8

> On two different occasions I contacted the FBI about the project and offered to provide full sets of data that I had collected. The FBI twice rejecting a set of information that could have reasonably led to the arrest of several pedophiles seems like a big mistake.

"full sets of data" seem to include Tor exit node IP addresses (public information that you can obtain from the Tor directory service) and a few possible real IP addresses—but not ones he can directly tie to any actual CP. As he says, "Admittedly, after introducing the security scanner, traffic patterns changed. Scans on the server dropped and some of the users who opted to run the software appeared to be government…

I have already shut down the VM but I believe there were around 550-650 registered users in 14 days. Around 40-60 new registrations per day. Total registrations for counterfeiting+drugs sites: 8. Since the article went out, someone pointed out to me that one popular pedo .onion site has 90,000 registered users.

Re: Running a Dark Web pedophile honeypot

#27
post #18
post #10

Earlier quoted context omitted.

The author appears to believe that "Tor is the devil" because "4,000-5,000 hidden services are running at any given time. Secondly, the content served by these sites is almost universally illegal or immoral (by my definition anyway). A conservative estimate would be maybe 1 out of 200 or so hidden service websites contain content I would deem worthy of the protection an anonymous network provides. Sites featuring fre…

Are knives the devil, because knives can be used to kill people?

Their argument doesn't appear to be "Tor is bad because it can be used for bad stuff" but "Tor is bad because it is overwhelmingly used for bad stuff today". That seems to be a meaningful distinction to me.

(I don't really care about the argument/premise itself, I just find your sloppy attempt at a counter-argument to be weak)

Re: Running a Dark Web pedophile honeypot

#28
post #18
post #10

Earlier quoted context omitted.

The author appears to believe that "Tor is the devil" because "4,000-5,000 hidden services are running at any given time. Secondly, the content served by these sites is almost universally illegal or immoral (by my definition anyway). A conservative estimate would be maybe 1 out of 200 or so hidden service websites contain content I would deem worthy of the protection an anonymous network provides. Sites featuring fre…

Are knives the devil, because knives can be used to kill people?

If you're looking for a shoddy metaphor you should probably use swords instead, because the legitimate uses of knives vastly outnumber the killing-people uses of them but swords have it the other way around.

Re: Running a Dark Web pedophile honeypot

#29
post #18
post #10

Earlier quoted context omitted.

The author appears to believe that "Tor is the devil" because "4,000-5,000 hidden services are running at any given time. Secondly, the content served by these sites is almost universally illegal or immoral (by my definition anyway). A conservative estimate would be maybe 1 out of 200 or so hidden service websites contain content I would deem worthy of the protection an anonymous network provides. Sites featuring fre…

Are knives the devil, because knives can be used to kill people?

[deleted]
Post reply on HN