lainchan / Ω
rabbithole
Dox · 2022-09-03 03:07
I haven't been on Tor for a long time, but I decided to get back on and see some old image boards I used to go on. They were all down so I looked up a wiki I had bookmarked that had links to all of them to see if maybe they'd simply changed their addresses. I noticed that every single link on the site had been changed from .onion to .onion.ly which takes you to the tor2web proxy. I checked a few other wikis and saw the same thing. I've also found a number of soykafty directory sites with the .onion.ly everywhere. From their own page the warning:
>WARNING: Tor2web only protects publishers, not readers. As a reader installing Tor Browser will give you much greater anonymity, confidentiality, and authentication than using Tor2web. Using Tor2web trades off security for convenience and usability.
why would a wiki forward all it's links through a proxy that defeats the purpose of being an anonymous reader?
tor2web was started by Aaron Schwartz who is now dead (some argue under dubious circumstances), and Virgil Griffith who is now in federal prison for teaching north koreans how to circumvent sanctions with cryptocurrency. It was taken over by GlobaLeaks, which partners with and gets funding from a variety of NGO's including Amnesty International. GlobaLeaks secured a good portion of it's funds from the Open Technology Fund, which was founded in part by the state department under Hillary Clinton. OTF itself receives most if not all of it's funding from USAGM. If they don't sound familiar to you, maybe the BBG does (Broadcasting Board of Governors). This agency is in charge Radio Free Asia, and Voice of America which broadcast into countries that have contentious relationships with the US and spread State Department propaganda. They're the foreign arm of the US propaganda machine.
in 2018, USAGM's board of directors was replaced by a single person. Trump elected Michael Pack. Pack was a week late to assuming his role at USAGM because he demanted his office be "swept for listening devices". At one point Pack was the CEO of the Claremont Institute. If you don't know what that is you should read about it. Pack gutted most of USAGM, and he fired the entire board of directors for OTF in 2020, he then resigned a few days after Biden became president.
All that to say here are all of these hidden services, now directing to this service that cripples the network. The original owners of the service are either dead or in prison, and the people maintaining it are funded by the propaganda wing of the state department. Not only does it appear that many of these sites have "changed hands", but that the tor network is being flooded by copy-pasted websites that all do the same thing.
I get that law enforcement are trying to de-anon people all the time, here is the thing though. This doesn't seem to be targeting pedos, or drug dealers, or things like that. This seems like it's geared towards people that would leak some sort of documents. I was on Tor a few months ago, it wasn't like this then--the changes are very recent. What activated IA's to start spawning dragnets that are geared towards preventing disclosure?
Or maybe I'm just schizo.
Tyrell Wellick · 2022-09-03 07:23
>>63103
Just a shot in the dark, but I would hazard a guess at the US government being afraid of whistleblowers given their increasingly hostile and totalitarian approaches to problems. The ATF is in the trial stages of raiding people's homes for an item they arbitrarily declares illegal, and the heads of the country are trying to declare a large chunk as enemies of the state. Given this, it makes sense that the government would be worried about dissidents in their institutions becoming whistleblowers. Either that or they are trying to watch out for dissidents in their ranks trying to hide their true politics.
On a wider note, the government has trended towards actions to protect itself over law and order in a sort of anarcho-tyranny. The country may be burning, but as long as they get their votes and their taxes, what do they care?
Given this dire state of things, what can be done to circumvent this surveillance? Would I2P be more secure, or does it have its own flaws?
John Rain · 2022-09-03 07:39
>>63105
I've thought about checking out I2P/Yggdrasil and some of the other anon-nets. I've heard I2P hidden services are actually pretty nice compared to Tor
Nobody special · 2022-09-03 08:27
As an avid Tor user who reads anonymity research papers for breakfast, I am puzzled as to what your point is here. From my perspective Tor is very simple, exposed to the user via a SOCKS interface and proxying any TCP payloads through onion routing, so pardon me if I don't relate well to this kind of 'mystery thinking'- it appears to be something about an obscure website/link directory catering to the extremely lazy? Even if such a thing were compromised, it is as you note- high value targets would not do much as blink at, let alone be aware of, such a thing.
Unless, do you think that this site is being pushed at potential leakers? If so, what would make you say that?
Aristóteles Amadópulus · 2022-09-03 08:50
>>63107
>If so, what would make you say that?
it's a combination of things. First, it's the cloned wikis. They're exact mirrors of the hidden wiki but with every url replaced with .onion.ly. Some of them even sit on the old addresses of real wikis, notably gull and tortoise. Next, there are the copy-pasta websites. Each one offers services for leaking documents, but every single one is just a copy of another, and as far as I can tell the ones i have found use .onion.ly links. Take a look at these menu bars from each site and you'll see what I mean, they're all low-effort copies.
my thought is that somebody with documents or some information they want to leak will turn to Tor. They'll just be some beaurocrat or administrative type and they might not be technically versed in security at all, and have just heard of Tor and downloaded the TBB thinking that is all they need. The stumble on one of these pages and think they've found what they were looking for.
Cereal Killer · 2022-09-03 09:09
>>63107
Responding to talk of I2P, I think it's a neat project- I'm currently writing something that will use it as a transport, something which many anons will enjoy, and I appreciate how friendly/active some of the devs in those communities are. That being said:
>Would I2P be more secure, or does it have its own flaws?
Well I2P has a few differences from Tor.
- Relay diversity & quantity. In I2P almost everyone relays traffic, so your average relay is likely to be someone's home PC instead of a VM in a datacenter. The relays are from all over the world as opposed to how Tor relays are mostly NA and Europe. There are more relays, at least 80,000, but fewer users in total than Tor so a lower anonymity set. Residential connections also mean less bandwidth and lower average relay uptime, take that for what you will.
- No exit relays. You have to use an outproxy configured by either yourself or someone else if you want to access the clearnet.
- Design differences. For example, I2P uses unidirectional tunnels instead of circuits. This means that different tunnels are constructed for outbound traffic and inbound traffic, which is theoretically meant to double the amount of network visibility an attacker must have to see the same traffic as they would see if tunnels were bidirectional like Tor's. The merits of this are not well-studied. There are a slew of other minor design quirks meant to make attacks harder as well.
-To start, it is not centrally managed, which is a double-edged sword- with a central point of truth it is easier and more efficient to weed out malicious actors, but you also accept the risk of the trusted entity being malicious or denied service. But without a central authority, it is difficult to know who to trust. In the future I think that a hybrid model would be more appropriate- using a Web of Trust in which relay operators vouch for which other operators they believe to be real human beings, Sybil attacks could become incredibly expensive. Few are working on anything like that though, except like Nusenu is trying to get tor relay operators to publish their info to DNS records....
- I2P has nowhere near the amount of funding that Tor has. In fact it's all passionate hobbyists and donations. This means there is less research and less manpower to weed out flaws. I blame the lack of outproxying for styming growth. Hell their network would have died 15 years ago if it wasn't for the effort of a handful of guys, read this article https://i2p.medium.com/20-years-of-privacy-a-brief-history-of-i2p-8f62af87ee87. Their stuff has definitely gotten a lot better now though.
Cool network, I personally really like it as a transport layer for stuff. Did you know it supports UDP? Not perfect but great potential.
BloodCat · 2022-09-03 09:17
>>63108
Hmm. Well the primary effect of replacing links *would* be to redirect traffic into an easier to monitor place, and I find it hard to imagine someone just doing that for the lulz. After all, if I ran a site like that, it would be barebones HTML all signed by my pubkey and others' keys vouching, all honest to god .onion addresses. Creepy, maybe you are right.
Hagbard Celine · 2022-09-03 18:31
>>63103
>>63108
>hidden wiki
is it 2013?
dark.fail (darkfailenbsdla5mal2mxn2uz66od5vtzd5qozslagrfzachha3f3id.onion) or tor.taxi (http://tortaxi7axhn2fv4j475a6blv7vwjtpieokolfnojwvkhsnj7sgctkqd.onion/)
The hidden wiki and all of the directories that used wiki software were soykaf. By nature of being a wiki, people always replaced real links with phishing links. The original hidden wiki had its private key leaked years ago, too.
lurker · 2022-09-05 14:05
this might be unrelated or repititive but do you any of you lainons got links to some good and active chatrooms?
by good i mean moderated (or private chatroom)
I have visited ableonion sometimes but mostly those were unmoderated and inactive, while it was, most discussions tend to be not related to STEM
another one was darkforest but meh...maybe my timing was wrong, mostly seemed dead or maybe i was quite impatient for the things to unfold itself
i would love to see some recommendations
Anamika · 2022-09-08 17:43
>>63226
I was amused by TCPDIRECT. They are criminals, lol
sad_FM · 2022-09-08 21:11
>>63126
The mediawiki software itself becomes increasingly corrupted by unnecessary javascript (and I don't just talk about the vector skin) and tons of code that nobody needs since circa 2010
Incognito · 2022-09-09 02:38
>>63335
do you have any links for it?
Zhora · 2022-09-09 04:43
>>63358
unwfzxog4zi6crfjcxwbgrxkdde2halgzrft6gbhkzhlgo7onuzlecyd.onion/
no ssl, 6667 obviously
Yu-ichi · 2022-09-09 05:11
>>63359
I searched for it, is it an irc channel and it seems like its down(busy)
Tyrell Wellick · 2022-09-09 15:57
>>63360
I suppose it is. I was sent to https://bph.pw/ (another irc net) by some anon on nanochan months ago, and i still talk with that person :)
William Holtzer · 2022-09-11 21:14
>>63103
>I found a hidden wiki
Close the tab and restart your browser. There are no hidden wikis, this is not 2013. Only poorly made copycats of copycat pages that try to peddle a few scam links (it's very obvious which, they are often highlighted or are in epileptically flashing banners)
>Why onion.ly links
Because these "hidden wikis" are not even hidden, hey probably have main clearnet address like hiddenwiki.fromrussiawithlove.onion.biz and are supposed to lure absolute dumb normals
>I decided to see some old image boards I used to go on
imageboards.json lists are all you need:
https://imageboards.net/
Sources:
https://gitgud.io/iblist/imageboards.json
https://github.com/ccd0/imageboards.json
>I want to see what's on le dark webz
Use Tor Taxi, a directory maintained by Dreaddit user. It looks too oldskool to be a scam for normals, but beware of links that lead to markets and currency exchanges, any place that would eventually ask you to art with your money for any reason you'd believe it would be good place to send your money to. Owners of those addresses might want to scam you or someone takes possession of Tor Taxi address (and hence the power over publishing any information that might be presented through this address) and decides to scam people clicking on popular site name. Save a local copy of this page once and refer to it as a standard measure for future versions:
http://tortaxi7axhn2fv4j475a6blv7vwjtpieokolfnojwvkhsnj7sgctkqd.onion/