Re: [tor-talk] dutch police crawling hidden servers

[krishna e bera <keb@xxxxxxxxxxxxxx>]

On Tue, Aug 5, 2014 at 3:20 PM, Roger Dingledine <arma@xxxxxxx> wrote:
> On Tue, Aug 05, 2014 at 03:09:29PM -0400, Andrew Lewman wrote:
>> Given the resources of a national police force, it seems probable they
>> can create a crawler to simply crawl every permutation of hidden service
>> addresses on port 80 alone.
>
> No, that's 2^80 addresses. Doing 2^80 lookups over Tor will take
> millenia (if you're efficient).

Wouldnt they just have to run an HSDir node to get a list of published
.onions for all the active hidden services, to be subsequently probed
and crawled?
It looks like proposal 224 wants to do something to make that harder,
but that is aimed at 0.2.5.x series which isnt widely deployed yet.
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk