Re: [tor-talk] Rumors of Tor's compromise

["phillip@xxxxxxxxx" <phillip@xxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/26/2011 05:42 PM, Orionjur Tor-admin wrote:
> On 25.10.2011 15:04, Andrew Lewman wrote:
> 
>> We're reading the press articles, pastebin urls, and talking
>> to the same people as you. It appears 'Anonymous'
>> cracked the Apache/PHP/MySQL setup at Freedom Hosting
>> and published some, or all, of their users in the
>> database. These sites happened to be hosted on a [Tor hidden
>> servce](https://www.torproject.org/docs/hidden-services.html.en). Further,
>> 'Anonymous' used an old denial of service
>> attack on 'Freedom Hosting' known as the
>> [slowloris](https://secure.wikimedia.org/wikipedia/en/wiki/Slowloris)
>> attack.
> 
> [Off-topic]Anonymous are very strange people. I cannot understand their
> political position. I understand their actions such as "Occupy
> Wall-Street", but I don't understand their fighting with "pedophilia".
> 'Pedofilia', in the general rule, is not a good thing, but it is not a
> global problem such as poverty, starvation, social inequality and etc.
> Furtherinmore buorgeois governments use "fighting with pedofilia' as
> pretext on suppresion their people, breaching human rights, banning
> normal human life on pseudo-religious basis (I am meaning various
> interdictions of sexual life of teenagers, i.e. quite ault for sexual
> life people, and etc.)  and creating low-cost labour power in type of
> prisoners for their capitalists.[/off-topic]
> 
> 
> So ddos-attacks on exit-node are possible?

As the hidden services are running inside the tor network, exit-nodes
are not implicated in this attack, they just have exhausted the HTTP
process using some Slowloris attack in conjunction with sql injections
to retrieve the users credential that were using this web sites.

Best,

Phillip

- -- 
www.bailey.st
IM: p0bailey@xxxxxxxxxxxxx
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEcBAEBAgAGBQJOqDZrAAoJENNBJKHbaDgT8bIH/389ckiAx+cgpKgqTAMOhdMn
osahR3eXoITKQz6TcjQA1KMm5QswGU3gdyUgGvfrDa/Qb/0UyinpsNeiMnfUm7TK
GXRT5IJOpUs7jez3oMwAnaFvQX62aC2tj34OoqB//sfT2uq5ZRds/tayb7v+ZLB3
AKhGZbg9h0Ed8YzQi67K233wkQ3qf1A/jAEhf4uTQLjnNcQegaW05o3JvZ8QeLeG
waXgXFjFaAoPMeNDgww/bhyEPtGUPogAos7PQFGnZrq5Qmqq0FKzqFhpw8vRf5Xr
7a6gyWDkSN/xrG1eWI6bvqvlVsjvZE5wqCXhZqoTviQoiHTE9Wgo5/9sx/W1G6M=
=Zx2K
-----END PGP SIGNATURE-----
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk