27

Yes! We made a small list of groups that have known and recommended Tor researchers here: https://research.torproject.org/groups.html But there are literally dozens of research groups working on evaluating and/or improving Tor. Take a look at http://freehaven.net/anonbib/ for all the good examples I've found so far. As for where their funding comes from, ...


13

The easiest way is to emulate the network, such as with ExperimenTor (which uses virtual machines) or Shadow (which uses a discrete event simulator). With Shadow (which I have more experience with), a 20 node network should fit in 4 GB of RAM such as on a Amazon EC2 m1.large server. Another option is Chutney, which is simpler than either ExperimenTor or ...


3

First, you need to know what kind of hash it is. Read more: How to determine what type of encoding/encryption has been used? What algorithm is used for 1024 bit hash which appears on 56th page of Cicada puzzle runes? How long to brute force a salted SHA-512 hash? (salt provided) Assuming it's 512-bit SHA unsalted hash, then it'll be a bit tricky and it ...


3

Just looking through code on git I'm seeing: int NewCircuitPeriod; /**< How long do we use a circuit before building... **/ Which makes me think that if "10s of hours" in seconds is easily overflowing an int. try around 30000 maybe?


3

If you did for some reason need discrete machines, some single-board computers would be good inexpensive candidates; Raspberry Pi is a bit slow, and 1024MB of RAM is better than 512MB if you're going to build a lot of circuits. Candidates: Raspberry Pi (1 ARMv6 core, safely overclockable to at least 950MHz, 512MB RAM) BeagleBone Black (1 ARMv7 core [IIRC], ...


2

I placed 36367763ab73783c7af284446c59466b4cd653239a311cb7116d4618dee09a8425893dc7500b464fdaf1672d7bef5e891c6e2274568926a49fb4f45132c2a8b4 into DDG and came across md5hashing.net. Which when I decrypt the (whirlpool) hash I get a pastebin account with this downloadable file uRkNsGsa.htm. The info from this file I can't get past the recapture on the ...


2

Princeton is one of the better ones in this area. See http://www.princeton.edu/~pmittal/


1

It's not clear if that story is true or not: https://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/ https://krebsonsecurity.com/2014/10/silk-road-lawyers-poke-holes-in-fbis-story/ But generally, your onion service can directly leak personal information in two ways: Onion service connects to a third-party server without connecting through ...


1

A "page" and a "site" are different things. For example, Wikipedia is just one site, but it has 52,702,416 pages. If Torch has indexed two million hidden services, then it only requires an average of 500 pages per service to get the claimed billion pages.


1

Neither of those links are to onion services. The first one (https://randomletters.onion.pet) is a MITM proxy which you can see from the .pet at the end. The second one (https://otherletters.com) is a site pretending to be an onion address which you can see by the .com at the end. So to answer your question, no DuckDuckGo is not indexing onion services.


1

You are correct, packages are usually inspected and can technically be seized and the seller knows your name and home address. And there is no guarantee if the package will even arrive or if it will arrive with your product. Sometimes it can be hand delivered by the seller which is even more dangerous. There also isn't a guarantee if it's actually law ...


1

Go to a search engine that searches onion services. You can find some here or here. Once you find a search engine that you want to use, right-click on the search bar and choose "add keyword for this search". This is the exact same as Firefox. See this guide for more information.


1

It is good to see that you want to do research on the Tor network. First please make sure that you have Tor's ethical research guidelines in mind. In general you try to create new circuits during short time periods. This puts some load on the nodes and on the network in general. Tor offers the possibility to create an own test network and furthermore there ...


1

Tor will hide your IP address from the sites you visit. Google will know what someone searched for and which results they clicked on. But your IP address is hidden. The sites you visit via Google search results will know that someone came from a Google search and what the search was. But your IP address is hidden. If your search is fairly unique, and you'...


1

Metrics is a good source for your cause. And it is official. You can and should get blacklisted for hosting a relay that grabs such sensitive user data. As you said Tor is a tool that is granting anonymity to his users and I think none of them wants you to collect data from a guard relay for your assignment. Metrics is the only source that is allowed to do ...


1

The Onion address landing page produced from the hash [dxwd42hgpd7qrccm.onion] shows Lat/Long coordinates 51°29'56.4"N 0°09'41.0"W which resolves to the Ecuadorian Embassy in London where Julian Assange was held. The vault reference is likely to Wikileaks vault. Date is to left [4-7/19] is right around the time Wikileaks discovered the subterfuge. The ...


1

So I cracked the hash in the seeker message here are two links one for the union site and the other to a cryptic video perhaps you will have more luck than I did - W dxwd42hgpd7qrccm.onion < onion site in reference in the Primus and the corestponding link the onion takes you to https://1711141131131.xyz/


Only top voted, non community-wiki answers of a minimum length are eligible