Re: [tor-talk] introducing ahmia search

[tor@xxxxxxxxxxxxxxxxxx]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 28/09/12 14:07, ahmia wrote:

> We are working on Tor related projects including running Tor exit
> nodes and the first public Tor hidden service search engine 
> (http://ahmia.fi/).
> 
> We would love to hear opinions and ideas about ahmia.fi search.
> There are now few enthusiastic geeks using their own money and free
> time to this project and everyone is welcome to join.

Am I right in thinking that the way this search engine works is that
the entire index is sent to the browser initially, and then the
browser locally searches that index? If so, that's a pretty neat way
of protecting peoples searches. Obviously, it wont scale, but you know
that already.

It feels like you're doing the search in the main thread as I type
into the search field, as it's blocking the user interface a lot. I
suggest you use javascript web workers for this purpose so you can
background the searching task onto a new thread. Or just get rid of
the whole "search as I type" thing. Gimmicks are fine, unless they
actually make the user experience worse.

Please provide https. At the moment, the search engine can be
trivially MITM'd and script inserted to log searches. Also, please
rethink your decision to let Google execute arbitrary code on your pages.

- -- 
Mike Cardwell  https://grepular.com/     http://cardwellit.com/
OpenPGP Key    35BC AF1D 3AA2 1F84 3DC3  B0CF 70A5 F512 0018 461F
XMPP OTR Key   8924 B06A 7917 AAF3 DBB1  BF1B 295C 3C78 3EF1 46B4
-----BEGIN PGP SIGNATURE-----
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=Wbff
-----END PGP SIGNATURE-----
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk