Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Popular dark-web hosting provider hacked, 6,500 sites down

zdnet.com

Post reply on HN
Print view View original

11–20 of 160 posts

Re: Popular dark-web hosting provider hacked, 6,500 sites down

#11

Post by dewey »

superkuh wrote: post #4

Man, why do people insist on using others to host their tor hidden services? It seems like the last thing you'd want or need to do. It's super simple to set up a hidden service from your home computer and host. I've been putting all my clear web sites on tor as well for years. Lots of bot traffic but never any problems and plenty of real traffic too.

The same reason people host their emails, websites, photos somewhere else or host their infrastructure in the cloud instead of colocating. It’s not hard but just another thing you have to care for when your real focus should be on what you provide not how you provide it.

Re: Popular dark-web hosting provider hacked, 6,500 sites down

#12

Post by foepys »

john37386 wrote: post #10

"Backups? Forget it. This is the Dark Web. Winzen told ZDNet that there ain’t no such thing as backups on Daniel’s Hosting, by design:" I'm wondering why encrypted backup is not an option for them?

If the user isn't the sole owner of the key, encryption is pretty much worthless for such services. At this point users can do the backups themselves.

Re: Popular dark-web hosting provider hacked, 6,500 sites down

#16

Post by segmondy »

busterarm wrote: post #7
new_guy wrote: post #2

https://github.com/Bo0oM/PHP_imap_open_exploit/blob/master/e... This seems to be the exploit they used?

Sanitize your inputs...

It wasn't just inputs, it's not enough, weak types. Using == instead of === they could brute force guess a session, it took multiple exploits to escalate till they got shell access.

Re: Popular dark-web hosting provider hacked, 6,500 sites down

#17

Post by SamReidHughes »

superkuh wrote: post #4

Man, why do people insist on using others to host their tor hidden services? It seems like the last thing you'd want or need to do. It's super simple to set up a hidden service from your home computer and host. I've been putting all my clear web sites on tor as well for years. Lots of bot traffic but never any problems and plenty of real traffic too.

If you're hosting illegal content, traffic analysis could be used to catch you.

Re: Popular dark-web hosting provider hacked, 6,500 sites down

#19

Post by httpsterio »

GordonS wrote: post #13

> Winzen said his priority was to do a full analysis of the log files I wouldn't have thought a darkweb hosting service should have any logs?

It's a server just as any server, instead of serving content through apache or nginx, you are more likely to serve it through thttpd or savant.

Re: Popular dark-web hosting provider hacked, 6,500 sites down

#20

Post by supakeen »

whyleyc wrote: post #8

Background info on the exploit used at: https://antichat.com/threads/463395/#post-4254681

The one the owner thinks was not used as he only saw database access not shell access but was mentioned by ZDNet as getting well known around the time this database was emptied.
Post reply on HN