Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Dark.fail: Is a darknet site online?

dark.fail

Post reply on HN
Print view View original

41–44 of 44 posts

Re: Dark.fail: Is a darknet site online?

#41

Post by clubm8 »

hombre_fatal wrote: post #29
dingdingdanggg wrote: post #16

Is an illegal* site online? If I built this service I’d just log all the IPs from the requests and just hand them to the FBI.

I don't know how someone technical could think the FBI cares about some random IP addresses visiting dark.fail. Do you also think the FBI uses their VB.NET GUI to cyberhack-backtrace this IP address list to arrest people for the pre-crime of looking for DDG's/BBC's .onion site?

Having a list of people who visited the site (possible via DNS records) is definitely a way to drastically narrow your suspect pool. Now you don't need to be a global passive adversary - you just sit on the links used by the "bad" people.

Re: Dark.fail: Is a darknet site online?

#42

Post by Forbo »

steveeq1 wrote: post #37
buildbuildbuild wrote: post #6

Tor admins and cyber researchers rely heavily on this site to disseminate links in the wake of DeepDotWeb’s takedown. DDoS attackers seem to love it too as some sites change their .onion URLs ~hourly. Interesting how all sides of a battle can find a simple verified link so useful.

Does anyone know if there's any progress on finding a solution to the DDOS attacks that can run on tor?

They're making progress on it: https://github.com/torproject/tor/pull/1262

Re: Dark.fail: Is a darknet site online?

#43

Post by theamk »

Liquix wrote: post #39
aaron695 wrote: post #15

Earlier quoted context omitted.

> some sites change their .onion URLs ~hourly. Not sure why you would do this? Do you have an example?

Addresses are changed when the DDoS takes one down. This mean's the attacker's (usually automated) resources are wasted on a domain no one will ever visit again, while users will just visit dark.fail and get a new link 15 seconds after the site goes down. At the beginning of the DNM large-scale DDoS attacks (Empire in particular), there was panic, confusion, and a whole lot of phishing. As another commenter noted, Em…

Is there a reason automated DDOS bots cannot visit dark.fail as well, to automatically attack all the mirrors too?

Seems like an obvious next step.

Post reply on HN