SoylentNews is people
SoylentNews
Little is known about how U.S. and European law enforcement shut down more than 400 websites, including Silk Road 2.0, which used technology that hides their true IP addresses. The websites were set up using a special feature of the Tor network, which is designed to mask people’s Internet use using special software that routes encrypted browsing traffic through a network of worldwide servers.
The Tor Project, is a nonprofit that relies in part on donations. The project “currently doesn’t have funding for improving the security of hidden services,” wrote Andrew Lewman, the project’s executive director, in a blog post on Sunday. ( https://blog.torproject.org/blog/thoughts-and-concerns-about-operation-onymous )
It is possible that a remote-code execution vulnerability has been found in Tor’s software, or that the individual sites had flaws such as SQL injection vulnerabilities. But Lewman wrote The Tor Project had little information on the methods used by law enforcement in the latest action.
“Tor is most interested in understanding how these services were located and if this indicates a security weakness in Tor hidden services that could be exploited by criminals or secret police repressing dissents,” he wrote.
http://www.pcworld.com/article/2845352/tor-project-mulls-how-feds-took-down-hidden-websites.html
[Related]: https://blog.torproject.org/blog/hidden-services-need-some-love
Can anybody help Andrew Lewman understand what happened ?
(Score: 2) by cykros on Monday November 17 2014, @03:39PM
Other than the time delay, that sounds better than what people have been doing on Tor in quite a few ways. The less interactivity, at least when it comes to the web, generally means the smaller the attack surface. Scripting in general is best left for the clear net. I'd be curious if Bitcoin would work with Freenet, or if it'd need its own cryptocoin like I2P does, due to network design, as that would definitely pose an issue with getting the ball rolling (if you think Bitcoin is unstable with a small userbase, just think about how fun doing business with Anoncoin must be...).