Category Archives: The Deep Dark Web

06/11/13

Stopping Pedophile websites in Tor

gAtO-nOtEs- Stopping Pedophile websites in Tor 4 LE

Dark web drugs site Silk Road knocked offline by hacker - http://www.bbc.co.uk/news/technology-22381046

From the IEEE report about “Trawling for Hidden Service” they explain as any network person knows that it take little more overhead to make a Tor connection than a regular Internet connection. (SSL-connections) That Tor-Relay will have to work harder and as more and more connections are made, Just like a DdoS attack but with a simple crawler we can bring down any Tor-Website from communicating with any new clients. The Tor-network has no load balance.

So a simple crawler looking for URL’s doing it’s work to gather information for a Tor search engine- Like I have – could accidentally play havoc on a Tor-websites -entry-relay —even silk road // no way pedro // so if we use enough of these crawlers we can stop people from getting to the website and they will have no clients.

Example for Law Enforcement:

Natural Spanking Website is Tor website- They have over 13,000 URL on their website – so that’s 13,000 pages of pedophile crap.  If we launch 8 crawlers from different places to crawl this site’s 13,000 pages again and again and again – all at the same time coming from different directions. Tor has no load balance so the websites Guard-relays cannot keep all these connections up. The (-combine crawlers coming all at the same time-from all over the world ) will prevent new clients accessing the site. The site will be un-reachable. You know what Amazon ec2 VPS server would be a great choice for this test.

If we do this for about 2-3 weeks – the word will go out that the site is down – The site will have to deploy and advertise new URL’S. if we also plan a campaign of propaganda news-feeds about that website and spread it on Twitter and get all the groups that hate pedophiles (anonymous and other groups). We can bring down any pedophile site this way.

But that’s a lot of work for any Law enforcement agency, but maybe not.01_29_tdp_xx

IEEE 2013 -Trawling for Tor- Hidden Service - http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf

From this paper we find new ways to go after the websites and find the IP and geo-location, we can take over the entry-guard-relays and get statistics and usage and maybe clients of the website.

  •  We have a way to get Tor-Websites stats- we have a method to measure the popularity of any hidden service without the consent of the hidden service operator.
  • We will work on this way of stopping a Tor-website form operating -We show how connectivity to selected hidden services can be denied by impersonating all of their responsible hidden services directories.
  • We will demonstrate a technique that allows one to harvest hidden service descriptors (and thus get a global picture of all hidden services in Tor) in approximately 2 days using only a modest amount of resources.
  • We show how to reveal the guard nodes of a Tor hidden service.
  • Harvest all known Tor-hiddens service-websites.
  • We propose a large-scale opportunistic deanonymization attack, capable of revealing IP addresses of a significant fraction of Tor’s hidden services over a one year period of time.

Of course going after a website like this is only allowed by Law Enforcement - gAtO oUt

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/04/01_29_tdp_xx-300x231.pngDigg ThisSubmit to reddit
06/6/13

Tor friendly ISP

gAtO FoUnD this- an wanted to share- When you work with Tor servers you need a good ISP behind you – my last ISP inMotion just locked out my site and email and file access – unless I upgraded – This was because of Tor- traffic to my site. So if your site get users from Tor- do NOT us InMotion they SUCK-tor_2013

We are in the process of deploying Tor-OR-relays to help the Tor-network and help us in our research. No we will not run exit-relays – too many problems-/ but it would be nice since the government loves exitNodes so they can monitor traffic. Washington, DC area loves Tor – ummmmm wonder why.    Biggest Tor-relay Growth Tor Usage Washington-DC 

This page aims to list community experiences with Tor and various Internet Service Providers (ISPs) around the world. Some ISPs are Tor-friendly, some are not. Some are competent and clueful about Tor or about security in general. Let us know!

Be sure to provide useful information like how much bandwidth you pushed, whether you thought the deal was cheap or expensive, how hard you had to work to make them understand what’s going on, how long your server has been running, and whether you’d recommend them to others. Also include dates. – gAtO oUt

Good experiences

US

  •  Amazon Web Services (AWS) (hosting) allows customers to run any type of Tor servers provided abuse complaints are handled in a timely manner. It makes sense why  Tor Cloud is run off of AWS.
  •  Axigy is a superb Tor hoster. Handles abuse perfectly. Ask for custom quote.
  •  Blacklotus allows Tor exits and has (quote management) “pretty liberal abuse handling policies”
  •  Binary CPU allows Tor nodes. I got a promotional unmetered package and been hosting an exit relay since January 2012. – December 2012: Sadly everything has come to an end, I guess. Binary CPU has discontinued their VPS services so there goes my fast exit node :(
  •  BuyVM.net Low cost and “good” bandwidth limit. Section 5.2 of their  Acceptable Use Policy state that any Tor services is fine as long as your (the user) personal information is registered to the IP you have in the ARIN database (SWIP). This requires the user to purchase at least an IPv4 /29 (6 IPs). (IPv6 only relay _could_ not require to purchase that. Answer is pending with an open ticket at buyvm.net).
  •  ChunkHost Good bandwidth, great uptime, excellent support, all around excellent VPS provider. However they questionable policies about TOR. They received one DMCA notice and despite the standard response, tell me VPS will be disable with one more notification. Still working this out. -hRB Jan/2012
  •  Team Cinipac Team Cinipac “allow on all server locations services like Tor/VPN/I2P because we are supporting projects who safe the privacy like wikileaks, Tor etc. We stand behind our customer and abuse will be forwarded to you to take action. If you have problems, need help etc. just only contact our Abuse/Law Department they will help you in this case. We do not provide any kind of information to third parties. Our company locate in Panama and we ignore court orders from other countries, because we think privacy is an human right.”
  •  Cyberonic is now on the COVAD backbone, so you should be able to get service from them anywhere you could get other COVAD-based service. They offer 6.0m/768kbps at $59/month, w/ a static IP. Can’t recall ever having downtime due to them and their TOS only restrict Email relay servers (and that’s probably only enforced if you have complaints). All other servers ok. If you sign up, tell ‘em brianwc sent you and I think I get a free month. — BrianC
  •  Ethr.net is a Tor-friendly ISP that already has a 20Mbit Tor Exit Node hosted there. Their services are a bit pricey, but they have excellent peering, and offer a “Cheap-Net” option to give you he.net bandwidth at a little less than half of their listed prices (~$20/Mbit).
  •  Evolucix is a low cost VPS provider. They offer TUN/TAP extensions on top of OpenVZ to provide VPN capabilities. They are fine with bridges and relays but due to the US regulations running exit nodes can be tricky. Great service from my experience.
  •  HostGator allowed Tor on VPS and Dedicated at least last year (2011), however you might want to check if this policy still applies. Their phone and live chat support is on 24/7. Hosted an exit relay for a couple of months. I discontinued my VPS because of the heavy price (still a great host though).
  • RoadRunner (TimeWarner) (USA): Very reliable service. Been running web server on 80 for several years. IP changes when cable modem reset (almost never for me). No ports blocked (that I know of). No BW limits, only speed caps. I’ve got 5Mbps down/384kbps up. Definitely recommend. Running Tor since Jan 06. — MichaelAnsel
  •  Softlayer allows for customized WHOIS, reverse DNS from their portal, and they are an utility provider. They have dedicated servers and cloud instances (Hourly or monthly billed). They come with 3,000 GB bandwidth standard, if you get a dedicated box. You can pick Dallas, Seattle, Washington D.C., and San Jose for server locations. By the end of the year (2011), you will also be able to run nodes in Europe and Asia as well. You may remember these guys: ThePlanet.com merged with SoftLayer in late 2010.
  •  Speakeasy (merged with  Covad and  Megapath in 2010) allows users to run arbitrary servers without port or traffic volume restrictions. Static IP addresses are offered without question or complaint.
  •  Slicehost/Rackspace (a hosting provider, not an ISP) allows running Tor on their servers, but if anybody downloads copyrighted material illegally through Tor, that’s a ToS violation. I had an issue with a DMCA (copyright violation) notice triggered by Tor activity exiting through my server, and I had to agree to block the port on which the material was downloaded for them to let me continue running the exit relay. Setting an ExitPolicy that only allows certain ports is probably smart if you don’t want to get into trouble. Otherwise, the service is great; each server gets guaranteed 10 Mbps, and the network has never been down in the 6 months I’ve been a customer. Plans start at US $20/month, reasonably cheap as these things go. Update: 3 March 2010: Approach with caution. I’d love to move my exit node to Slicehost, but after trading several e-mails with a Greg in technical support, I could not get a straight answer about whether Tor complies with the company’s AUP. Greg’s response when pushed: “Again, we do not recommend this service to be run on our platform. If you have any other questions, please let us know.” — EricB
  •  Sh3lls says their dedicated servers can be used for anything legal, as long as the customer handles abuse they’re fine
  •  Tailored VPS has a  blog post about hosting Tor relays so I assumed they allow hosting one. Been their member since late January 2012. Good experience so far. -> I can confirm they are quite tor-tolerant (even exit nodes). They ask you to deal with the abuse letters they forward you, and may ask to add an exit policy to the “victim”‘s IP as a precaution. Not the cheapest, but they play nice with Tor relays.
  •  VPS6.NET Tor initially allowed. Been hosting for an exit a couple of days there (also very nice support team!). – December 2012: They are now more strict about Tor. Middle nodes should be fine. However, if planning to host an exit, you might want to check if your desired exit policy is fine with them.
  •  VPSWebServer.com Windows VPS provider who allows to install Tor on their VPS Servers. I’m their customer for few months and ask them to install Tor and get positive answer. They allow to install all applications which are legal and don’t abuse others. Also when you make order you will get dedicated IP address. Also their support is full managed who always help to solve your problem’s and issue’s.
  •  ServerAxis Low-cost VPS provider offering both metered and un-metered (100Mb/s) plans. I’ve been a customer since mid-2012 and have run a bridge node the entire time without incident. The infrastructure seems solid, I’ve had no downtime. Low-end metered plans come with 1TB/mo data transfer allocation and $0.01/GB after that. Their AUP does not explicitly disallow Tor.

Austria

  •  EDIS GmbH (Hosting) allows Tor Exits and other nodes on dedicated servers (not virtual), Abuse will be forwarded. – please contact me personally (william A/T edis.at) before setting it up so i can mark the account in our backend as proxy/VPN (which means we forward the abuse and dont bother reading it + giving more time to react to it). IP will be nullrouted at Incoming DDoS. Please block common Torrent ports (since we dont want to deal with copyright abuse which is *VERY* annoying in Austria), IRC allowed. Client data will only be forwarded at subpoena from an Austrian court (or acknowledged from an Austrian court if it is foreign). *torexit* or similar reverse DNS can be forced at our discretion (unlikely). SWIP of IPs possible (25EUR onetime for a 4 IP subnet on your data + 1,5EUR per IP per month). (william, 12/2011)
  •  InterneX GmbH (Hosting) seems not to care about Tor nodes, likely mainly because their upstream/IP provider does not (see next ISP, UPC). Rather cheap VPS but openVZ based with low limits on connections. (william, 12/2011)
  •  UPC Austria GmbH (ISP) does not care what their customers do at all (unless you have a business connection), Cheap 100Mbit (down) 10Mbit (Up) connections (59EUR with VAT). (william, 12/2011)
  •  Silver Server GmbH Forwards abuse. Hosts already some big exit/entry nodes which seem to have no problems. Very expensive traffic. (william, 12/2011)
  •  Tele2 Austria GmbH Forwards abuse at business connections, good quality traffic, does not like “proxys” on private lines. Cheap synchronous (SDSL) connections. (william, 12/2011)
  •  A1 (former Telekom Austria) Does not like Abuse (in any form) at all. Seems to give out customer data at alleged abuse. Not recommended but cheap. (william, 12/2011)
  •  xpirio GmbH in general rather relaxed at all services, but better get in touch with their (very understanding) support when you expect abuse. (william, 12/2011)

Germany

  •  netcup GmbH allows hosting and does not restrict any TOR services at all but everybody should be aware that there can be huge legal consequences if laws are broken. I received this statement from the CEO Mr. Dipl.Ing. Felix Preuss today via mail (goose, 07.11.11)

Me and a friend hosted TOR both on our own netcup server a year ago, and the consequences were fatal! They wanted more than 350 EUR for a special effort (disable my and my friends server). We responded with the official EFF statement about TOR. No response from netcup. 1. dun, 2. dun. We went to a lawyer. He wrote them. No response from netcup. 1. collection agency, 2. collection agency. Lawyer responded to them and to netcup. No response from netcup. Finally they gave up. But they NEVER responded to any action me or my friend took. I wouldn’t recommend netcup as a TOR friendly provider. NEVER!

I also had a _terrible_ experience with netcup:

 

The service in it self was not very good. Being artificially limited to 400KB/s is extremely bad, especially when bandwidth was supposedly ‘free’.

 

Inability to cancel something via the internet that I was able to order via the internet. How can I legally enter an agreement over the internet but not exit an agreement? That is ludicrous.

  •  Weesly is very liberal and allows hosting Tor in any kind. Statement in German: “Bei mir kann man alles machen was nicht gegen das deutsche Recht verstößt”, in English: “With me you can do anything that does not violates German laws” (q23p, 10.06.11)

Note that you should let them know about your intention when ordering a server or in advance. (ch, 06/2013)

  • Although its located in the Netherlands, Germans could try Leaseweb. They’re hosting more than one *big* Tor-server and are quite tolerant. (anonym, 4/2010)
  • EUServ seems to be a good ISP for Tor (see what they think  here). They have a bad support, but if you know how to maintain your server, this ISP is a good choice. –JensKubieziel? ( http://identi.ca/notice/15888906)
  • IPX-Server.de (DE) has generous traffic limits (there are contracts including 1TB/Mo) and behaves as I’d expect it from good partners. Some BSA-notice regarding Torrents arrived, they informed me and told me to stop this “illegal activities” and said, after reading and (at least it seems so) understanding my reply explaining Tor with “ok, we won’t interfere, your problem”.
  • HostEurope: “generell schränken wir die Nutzung nur bei IRC-Diensten ein. TOR-Server können grundsätzlich betrieben werden. Allerdings müssen wir eventuell auftretende Beschwerden dennoch an Sie weiterleiten. Vor allem wenn der Server als Exit-Node fungiert ist es wahrscheinlich dass Beschwerden eingehen werden.” I’ve had a contradicting answer a few days later: “Leider müssen wir Ihnen mitteilen, dass wir aufgrund interner Richtlinien das Hosting für Ihre gewünschten Zwecke ablehnen müssen.”

 

I had a positive answer again (regarding running TOR on a VPS): “TOR services are allowed, as long as the load on the host system is not getting too big.” (1/2012) (but note that numtcpsock are set very low (550) on their VPS)

  •  http://www.keyweb.de/ offers cheap and reliable Virtuals Servers with 2GB HDD-space and liberal policies. The cheapest VPS is around 8 Euros. Not useful for high traffic nodes, they limit heavily after 5TB
  •  Afterburst (formerly Fanatical VPS) provides unmetered VPS on 1000mbps line. Fair usage applies. Quoting Nick from the team: “Yes hosting tor relays is allowed, however depending on the VPS you choose you’ll probably want to enforce a speed limit”. The Micro package fair usage is 1-2mbit a second which I gladly honor. Been hosting an exit relay since November 2011.
  • I’ve asked their support and I got a negative answer (4/2012): “We used to allow Tor on our nodes, but unfortunately we have had some issues with our datacenter (Hetzner) in terms of AUP and such. Sorry but we cannot allow anything tor-related anymore.”
  • That’s sad but understandable. This policy likely means “no new Tor relays”. I had some problems with abuse this month (5/2012), and they said it’s fine for now but if they see too much abuse they would ask me to switch to a non-exit node. Still counts as a good experience as Nick seems to be very understanding of Tor.
  • No longer allows exits at all. Middle relays are fine.
  • Tried to sign up for VPS for non tor related purpose, was informed that when doing a “fraud check”, they found my email associated with Tor. I asked for a refund.
  •  Server4You (Germany, part of  Intergenia AG) hasn’t complained about a Tor server (running on a non-virtual server) pushing 300GB/month for more than two years. They only block incoming port 6667. They are hosting more than a dozen Tor servers. — SvenNeuhaus (2008/01)

Server4You limits on virtual servers are ridiculous, actually. numtcpsock 288, tcpsndbuf/tcprcvbuf 3598712, lots of failcnt. Can’t use them with Tor. [2010/02]

I’ve asked Server4You support and they state servers with complaints about Tor will be canceled immediately (see the quote in the “Bad Experience” section)

United Kingdom

  •  Clustered.net has nothing against Tor nodes in principle, but warned that they’d asked me to stop if a large number of abuse reports were received. My fast/stable exit node’s been running there for three months now with no hassle.
  •  Gigatux has graciously allowed me to run a Tor relay for over a year and a half with no problems. They actually run their own relay named ‘gigatux’. Customer support has been very good as well, and they have helped me handle two abuse complaints admirably. They also offer servers in the US, Germany, and Israel. -Blackpaw
  •  Bitfolk allows Tor exits and relays. They are very knowledgable and understand Tor and its uses. They are hot on spam and abuse so advise changing the default exit (good idea in the UK anyhow). Any DMCA notices received were simply forwarded on without agro.

Finland

  • TeliaSonera Finland: Largest ISP in Finland. I’ve been running Tor node on 8/1 ADSL with semipermanent IP address (changes rarely). ISP has not interfered in anyway. They block only port 25. In the future TSF may activate “black lists” based on DSN (sorry effort to “fight kiddied porn). 60+ kBps continuosly. — JussiSavola

Iceland

  •  1984Hosting Has no problems with Tor, asked directly and was told they are fine with them. Fairly cheap as well. –Maquis196
  •  FlokiNET Privacy Hoster – TOR Nodes are welcome

Italy

  •  Prometeus Middle relays are fine, exits are forbidden by TOS. “A relay only Tor node or similar software which only allows traffic to other nodes is OK. For example, Freenet is allowed.”

Netherlands

  • John Brooks  runs a 2TB node at  LeaseWeb. He would recommend them for running a relay. — JensKubieziel.  In a mail to Tor-talk, a LeaseWeb employee (Alex de Joode) offered his help to sort out complaints regarding Tor.
  •  Ecatel explicitly allows Tor exit nodes and forwards abuse/DCMA, but their network isn’t the most stable. You need to email them for a custom offer. They also accept UKash/CashU.
  •  Netrouting has no problems with Tor
  •  DirectVPS has no problems with Tor
  •  Versio has no problems with Tor
  •  NForce has no problems with Tor

Norway

  • NextGentel (Norway): Allows Tor-servers. Assists Norwegian secret police in doing total surveillance of customers they torture for sharing their opinion without warrant or even a reason.

Sweden

  • TeliaSonera is also big in Sweden and deliver where other ISPs can’t (They were previously the state monopoly, which they still are, but they now pretend it’s free competition while they still own all the fiber). Blocks port 25 for all customers. Does not bother Tor-server operators.
  •  PRQ has no problems with Tor exits and abuse forwarding, but at a heavy price…

Canada

  •  TekSavvy has a server-friendly Internet Use Policy (e.g., running a Tor relay) and has taken a stand in favor of net neutrality. (2008-12)

Slovenia

  • With  Tuš Hosting we had really good experience running a 5 MB/s full-exit Tor on a dedicated server on colocation. They said that they care just that we pay our bills and they just simply forward DMCA notices to us to handle (or ignore) them and forward police to our home doors to question us. I really recommend them and if anybody wants to put another Tor node/server there I am willing to help. Mitar (mitar@…)

Ukraine

New Zealand and Australia

  •  http://rimuhosting.com/index.jsp Quite open to the proposition when approached. Have servers in N.Z.; Sydney; London; and Dallas. Locations may vary, but quite happy with the specific Oz/NZ query. No co-lo, but root access. “You can run anything you like, as long as it’s legal.” The moving goal-posts of legality are the only concern here.

Bad experience

US

  •  Ezzi.net. Running Tor was fine until Undernet mailed Ezzi.net a complaint which falsely claimed Tor was somehow a “botnet”. This made a  very rude person at Ezzi send a mail which falsely claimed the Tor servers were hacked and “It appears whoever caused this hacked the servers by brute forcing SSH logins and uploading a fake httpd binary and launching it.”. This person kept on insisting the servers were hacked after being politely informed that Undernet had confused Tor traffic with a “botnet” and that the servers where not compromised in any way, so it’s kind of hard to tell if the person was troublesome because the person did not understand what Tor is or if this person at Ezzi generally just imagines things and think they are part of reality. But it is clear that most ezzi customers  become ex-customers after meeting this known-to-be-rude tech.
  •  LayeredTech are a server hosting company located in Texas. I ran a server for six months without any issues, but then someone used the Tor server to exploit a PHP vulnerability. Explaining the goals of Tor to LayeredTech resulted in it being made clear that I was responsible for any and all abuse through my IP address. Shortly after this they ordered me to shutdown Tor. — Steve_Crook
  •  SONIC.NET of Santa Rosa, CA have terms of service that would apparently be Tor-friendly; but this thread http://www.dslreports.com/forum/remark,15272743 includes comments by SONIC.NET’s CEO that don’t sound particularly friendly or open to the idea of running an exit node.
  •  Linode will require you to shut down an exit node if it receives repeated abuse complaints. Non-exit relays are allowed.
  •  Tektonic will suspend your VPS with no prior notice if you run “any proxy”. They used to tolerate Tor if you didn’t run an exit node but they are now apparently auditing the VPSs for processes named Tor. They did however restore the VPS very promptly after I promised to uninstall Tor and Privoxy.
  • Comcast’s  Acceptable Use Policy for residential customers says no servers or proxies under “Technical Restrictions” (2009-08-10 tip from Scott Bennett).
  •  100tb.com (Softlayer) allows Tor exits, abuse needs to be addressed within 24 hours. Despite this “policy”, my experience was bad. They were very understanding at first when the exit was just made and got about 5 DMCA notices, and replied explaining Tor. A few days later, I got forwarded about 30 DMCAs, and few from Spamcop (even though common mail ports were blocked); as usual, I replied that it’s entirely because of Tor, and that I have no pirated content or viruses on my box. Apparently they got fed up with the constant DMCAs, and replied with “More will need to be done to block this. We will not tolerate open abuse of our network (DMCAs and SPAM via a “Tor Exit Node”). This type of service is prone to abuse and tarnishes not only our reputation but your reputation with us. If action is not taken to help prevent this going forward we will be forced to block access to the server”. At this point, I set it as a “middleman” instead of an exit, in hopes that it would stop the flow of DMCA notices. Nope, they disabled the interface. I have at this point stopped Tor on the 100tb box, and do not know what to do now. There is no way at all to block all P2P, and 100tb refuses to acknowledge this. They make claims “Tor is ALL RIGHT on 100tb boxes!”, but then go and screw you over when you get DMCA notices (it’s a when, not an if. Running a Tor exit WILL produce DMCA notices). I highly suggest avoiding these people at 100tb/Hosting Services, Inc./midphase if you are seriously considering running a stable Tor exit. We had a server there for 6 months, but then they told us Softlayer as DC doesn’t allow it any longer. (torservers.net)
  •  M5 Hosting does not explicitly forbid Tor in their AUP, but after operating an exit node for 3 weeks and receiving three DMCA complaints, their abuse department communicated, “Whereas Tor exit nodes facilitate unaccountable actions by anonymous users and those actions regularly expose [M5] to undue risk as well as oversight costs and unknowable legal expenses, Tor exit nodes will not be permitted on M5′s network” because “just responding to the abuse complaints costs [them] money and it costs money to [their] upstream providers and increase[s] [their] risks of incurring legal defense expenses” and ordered the Tor exit node to be shut down.
  •  FDCservers allows Tor, and customers to react to abuse within 24 hours before taking further steps. Be cautious if operating an exit node, for the boilerplate abuse responses are “not acceptable” per their Network Security Administrator. He sited the AUP/TOS and stated I have “the full responsibility for the content hosted and passing through the server. So if you cannot track or take actions against reported abuse issues you should terminate or restrict specific service” (which was a single exploitable php script probe).
  •  Santrex (1) Santrex gave me a poor experience, no abuse was forwarded, and my server was suspended without prior notice. (2) Santrex suspended the vps running an exit Tor node after 1 day telling me that torrenting was not allowed and I was abusing the service. No warning was given. They kept billing my credit card even after having the vps service suspended. (July 2011) (3) Santrex threatened to disconnect my dedicated machine after the second abuse complaint from an exit node. (In their Denver colo, at least, they appear to be subletting from FDCServers.net, mentioned above.) (Nov 2011)
  •  http://dreamhost.com Abuse department says Tor violates AUP and should not be run. Also said they had had Tor nodes run before on VPSes and it had caused performance degradation for other VPSes. 6/27/2011
  •  Mediacom Within one week of running an exit node on their residential service, my account was suspended due to DMCA requests. No requests were forwarded to me. No amount of reasoning/explaination/screaming at them would get them to restore service.
  •  http://rethinkvps.com Altough they weren’t against Tor exit nodes themselves at first, they run a three strikes policy about abuse complaints from “their datacenter”, meaning they themselves could get their machines kicked off. Running a non-exit relay should be fine.
  •  Chicago VPS First claimed I could host a node as long as I dealt with abuse reports. Then I got an automated abuse mail and I handled it with a proper reply. Then I got a rude threat they would terminate my VPS if this happened again. Not recommended unless you want a host that runs its hands up screaming on every abuse report they get. This abuse mail did not even state the web address this supposed spam/abuse happened but they fully bought it.
  •  VPSCheap.net Tor not allowed.
  •  5ITE Hosting Solutions Tor not allowed. Supposedly forbidden by TOS/AUP even though not directly mentioned
  •  DigitalOcean Tor was allowed, then they stealth changed the ToS after their KVM network stack was failing. Tor will get grandfathered status (Unlimited Bandwidth) removed, and they weren’t exactly keen to warn.
  •  VPSWebServer.com I’ve ordered their service, but they sent me my password only after 4 days, after I ordered another service already. I asked them to cancel my order and refund – but they just deleted my account, gave me no refund and they do not reply to my mails.
  •  owned by http://www.cirtexhosting.com/ Tor not allowed. Even middle nodes violate their TOS/AUP.

Phobos’ research

ISP Name Allowed IRC? Allowed Proxies? Allowed Tor?
 CI Host N Y Y
 Iweb.ca N Y Y
 Host Voice N N N
 Super Servers N N N
 Vericenter N Y Y
 Dedicated Now] N Y Y
 Soft Layer Y Y Y
 Tek Tonic N N N
 Unixshell N N N
 Verizon FiOS N N N

Notes:

  • Unixshell/Tektonic are the same company. They nullroute you on the first abuse complaint. Middleman nodes are ok, but the abuse dept requests “SafeLogging 0″ set in your torrc and wants full access to your logs on demand.
  • Verizon FiOS officially does not allow any incoming traffic, they reserve the right to disconnect you at any time for violation of this policy. Users have run middleman nodes without any incidents from VZ. Exit nodes with abuse problems have resulted in legal threats and disconnection threats, but no disconnection as of yet.

Germany

  • The german ISP dogado ended up killing the Tor server process and blocking the OR-port on my vServer. — d00b
  • The german ISP EuServ / ISPro — they just broke the contract, switching our Server off. — padeluun
  •  Manitu forbids any anonymisation techniques in their AGBs –qbi (gamambel: I have asked and they made me an offer for 100mbit dedi at 1500 euro)
  •  OVH (German ISP) offers root server with a high bandwidth (up to 5.000 kB/s). They changed their AGB and cancel “problematic” contracts very fast. — qbi
  • The german ISP Plusserver.de shut down h07onion due to gross incompetence. Look at  http://archives.seul.org/or/talk/Mar-2005/msg00120.html for more details.
  • “I have recently checked  manitu because they advertise with internet without censorship and data retention. Unfortunately they explicitly forbid providing anonymization services in their  general terms and conditions. On inquiry they have justified this restriction with the enormous bandwidth consumption and the impossibility to achieve fair combined costing in this case. For the same reason they forbid running mirrors of public data such as open source software. So I believe their argument is no pretense.” — Alex, Dec 01 2009 via email.
  • The german provider netcup.de suspended one vserver running a Tor exit node, analyzed stuff, and charged 192€ for processing _one_ dmca-notice. – ari
  • netdirekt.de: “Leider unterstützen wir keine Tor Exits. Sofern diese in unserem Netzwerk sind gab es vermutlich noch keine Vorfälle.”
  •  Strato writes in their  AGB ”Abschnitt III: Sonderregeln für dedizierte und virtuelle Server … 1.1 Eine Nutzung der Server zur Bereitstellung folgender Dienste ist ausgeschlossen: … Anonymisierungsdienste, z.B. Tor, JAP, Proxyserver”
  •  netcup.de Running a tor relay node with 256 kB/s bandwidth and 600gb traffic limit configured in tor I was moved to a high traffic node after about 8 days or 400 GB traffic usage, at which point the average bandwidth dropped to less than 50 kB/s. I was not notified of this changed but its clearly noticable via vnstat -d and a different cpu usage pattern on the new server (as in 100% _all_ the time).
  • I’ve asked the  Server4You support about Tor and they stated “TOR Dienste sind bei uns ebenfalls aufgrund der rechtlichen Graulage nicht gerne gesehen und werden bei Abuse Aufkommen direkt gekündigt.” (March 2011). In April 2012 they turned off my server because “Tor ist illegal in Deutschland” (“Tor is illegal in Germany”, according to their support).
  •  Hetzner has some Tor Exits, but they send an abuse request for each BayTSP request, and you have to respond each. Now (today, 05.09.2011) they disconnected my Tor IP, because someone did a netscan on a /23 via Tor. They requested a statement via mail / fax now, which I sent, but didn’t get a response yet. –morphium
    • Same thing (disconnect b/c of netscan) happened to me sometime around March 2011 . Connection restored after a few hours (Fax & Phone call “plz look at it right away”). Stopped me from having an exit there. :/ — Fusselwurm
  •  Alvotech doesn’t allow Tor exit nodes: “unfortunately we had several problems in the past with tor exit nodes (police stuff, ddos, lawyers etc.), so we don’t wish it in our network”. — Nyr

France

  • The french hosting company  http://www.online.net/fr (member of  iliad) suspended without warning a bunch a machines that were running Tor after the police came down about creditcard fraud. (Also, any kind of relay is explicitely forbidden in their term of service.)
  •  Gandi VPS will give one warning and then delete your account if you run a Tor node on their VPS system. Don’t try this if you have any domains registered with that account as well, it’s difficult to get them back.
  • OVH / Kimsufi suspended and restarted into FTP only mode claiming “hack” even when running as relay, Contacted OVH to explain Tor got the following reply: Actually we don’t like TOR on our network, as either a relay or an exit node. You can check our T&C. (Indeed, any kind of relay is explicitely forbidden in their term of service, however, I have a few servers there which are relays on non-standard port, never had a complain.)

Finland

Canada

  • Rogers has a no-servers clause in the TOS for their home internet service. If you are running an exit node and receive DMCA notices, you will have no legal recourse except to cancel service. (2008-03)

Sweden

  • Perspektiv bredband supposedly allows for running Tor nodes, but will disable your account due to spam.

United Kingdom

  • I have asked and  Swiftway doesn’t want Tor exits on their network.
  •  Memset do not allow Tor servers under their (rather vague) AUP.
  •  UK Dedicated aka Colo.net informed me that I couldn’t continue to run my Tor relay or in anyway effect, conduct or facilitate any activity involving: IRC or anonymous proxy services.
  • I asked  OVH/Kimsufi about their policies regarding Tor exit nodes and was told that an exit node is classed as an open proxy which is against the TOS. I replied that I’ll be running it in bridge mode then. No feedback on that so far. –Maquis196
  •  123-reg found out I was running an Exit Node (received a notice regarding filesharing, someone downloading torrents using my Exit). I was asked to shut it down. I complied and asked if i could run a Relay node. They said no as that would violate their AUP. — September 2012, vandal2

Italy

  • avoid SEFLOW.it! they say it’s against Italian law to have a Tor relay, asked which law, they said to contact a lawyer. (atrent: do you need a more articulate explanation? I’m the one who had the bad experience, I have all the emails exchanged and I can translate them)
  • GARR.it: well… it’s not an ISP but nonetheless since it’s the connectivity provider of italian universities we should mention that they do NOT allow exit nodes on their net (I had one, they obliged me to tear it down)

Slovenia

  •  Domenca has crazy prices (10 EUR/Mbit/s + 300 EUR/U for dedicated server per month) and they require not just to respond to all complaints in one working day, but also to prevent them in the future. Just replying with explanation that it is an anonymous service and there is no way to prevent this, is not enough for them. So it seems impossible to really host Tor exit node there. Mitar (mitar@…)

Netherlands

  •  PCextreme does not allow hosting of a Tor relay node on their VPS. (Tue, 31 Jan 2012)
  •  Seedmonster does not list Tor as being against their TOS, but they suspended a major tor node because of 4 web forum spam reports on a 1gbps exit. They will try to work with you, but their upstream provider is zero tolerance, so when it comes down to it, they will not back Tor exits. (Update:) They agreed to let it keep running after the exit policy was modified, but then came back a week later and said Tor had to be disabled completely. Three complaints were received out of approx. 10TB of traffic.

Malaysia

  •  Shinjiru is not allowing Tor since their new  policy (feb 2012), Even if all the exit ports are blocked, and even as relay : they are u-turning completely . (In the past they even  donated a server to the Tor project); traffic is expensive though

Russia

  •  Smile blocks any traffic, by redirecting to statis web page with message about that user is possibly providing access to third party. It does not like many simultaneous outbound HTTP-connections.

Switzerland

“TOR is not allowed to be ran on our containers. This is the reason why the process gets killer every minute. The reason why we do not allow TOR, is because over time we have seen that it consumes way too much CPU time, so we have decided not to allow it on our VPS. ”

  •  SolNet does not list Tor as being against their TOS, but they will ask you to shut it down if they receive complains via abuse (Fri, 15 Feb 2013).

Czech Republic

  •  NQhost They don’t allow running relays of any kind:

“We don’t allow to use our servers for tor exit nodes and/or relays”

Ukraine

  •  0x2A Refuses Tor traffic.
Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2013/04/tor_2013.tiffDigg ThisSubmit to reddit
06/3/13

Tor Websites over 1/3 TANGO DOWN

gAtO bEeN- doing some work on his Tor- search engine and finding Tor-websites IP but other are doing the same thing and publishes the news-

I guess the news is getting out and people are bringing their Tor-hidden service-websites are going DOWN. Not by my work – I wish – but by a simple little report -:tor-revealing_guard_nodes

IEEE 2013 just put out a report: Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization

http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf

yes kiddies wee can find your Tor-Website and find the IP and get the geo-location and track you down. The worst part now others know and Tor-websites are being taken down by their own administrators  so they can do countermeasures and not be caught.

2013-05-29 we had 16,000 Tor websites

2013-06-04 we have 3,517 Tor Websites

Application Server Details
Cache Last Updated (Local Server Time): 2013-05-29 23:19:07 MET
Last Update Cycle Processing Time (Seconds): 645
Current Cache Expire Time (Seconds): 300
Number of Routers In Cache: 3582
Number of Descriptors In Cache: 16099
Approximate Page Generation Time (Seconds): 0.1987
Application Server Details
Cache Last Updated (Local Server Time): 2013-06-04 02:11:43 MET
Last Update Cycle Processing Time (Seconds): 553
Current Cache Expire Time (Seconds): 300
Number of Routers In Cache: 3599
Number of Descriptors In Cache: 5817
Approximate Page Generation Time (Seconds): 0.01

So what happened to all the Tor-hidden serve-websites? All I care about is that my work now backed up by this reports shows we are on the right track and we can do what we say we can do and that is to bring down pedophiles websites down in the Tor-network.

The Tor-network is great but these monsters are making Tor a bad place to work and do legit business. Let’s hope other get the message that we are hunting you down even in Tor cowards- gAtO oUt

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2013/06/tor-revealing_guard_nodes.tiffDigg ThisSubmit to reddit
04/5/13

Tor Tells It’s Secrets

gAtO pLaYiNg with words in Tor- We just simply counted the number of times a word appeared in our search engine by pages- this is something every search engine does but what it gave us was a picture of what Tor really is. It’s not all crime and ugly but information is number one in Tor. Exactly what it’s supposed to be. Tor was created to share information from the table below we see lot’s of stuff inside Tor.output

Tor word data points: We put this report together to see what our word count occurrence was, in our crawled data so far. The chart below gives an interesting picture of the Tor data points that it generates.

We are finding that these are the best categories to put our websites into. The words by site occurrence speaks volumes to understand trends in Tor.  For example it shows i2p network in Tor 2 notices above drugs in Tor. Because i2p is fast being intwined with Tor to get better anonymity.

  • These are real data point based on 3/27/2013-4/3/2013 – this is a live report from our crawls.
  • As we crawl and add more data our picture will change as to the landscape of Tor. 
  • Bitcoins is the fourth most popular word – currency in the Dark Web is number 1  

—

Word Num. Occurrences
blog 1014
wiki 985
anonymous 966
bitcoin 837
sex 530
gun 492
market 458
I2P 400
software 372
drugs 365
child 353
pedo 321
hacking 314
weapon 221
politic 209
books 157
exploit 118
anarchism 105
porno 88
baby 87
CP 83
fraud 76
piracy 69

 

  • Bitcoins are above SEX tell us volumes in that bit coins are the normal exchange currency in Tor.
  • Fraud and piracy are the lowest were we would except it to be much higher, People trust more in Tor.

This map does tell us that crime is everywhere in Tor at a more alarming rate than we though.

We are doing the same in the e-mail we found in Tor. In the email table is a place where we can get a better picture of emails in the Tor network. Not all of them go to tormail.org as we thought. As mentioned more i2p and connections with other anonymous networks seems to be a trend, as the growth rate of Tor users increase so is the technical base and more sophisticated users will come on board.

Hope this gives you a better picture of Tor. -gAtO oUt

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/07/output.jpgDigg ThisSubmit to reddit
12/18/12

Legality of Bitcoins-Digital Currency?

gAtO gOt -Questions -Virtual Currency Real or Not- Reward Point, or bonus dollars and other forms of digital virtual currencies are normal for credit cards, online game sites, social networks and other specialty merchants and websites it all about true and branding. This new revenue stream is something that merchants are becoming aware of without knowing or understanding the legal aspects of this new digital currency world.

How does digital currency work in governments or does it – is it tax free, can I take campaign contributions with Bitcoins?

There are federal laws about digital currencies (gift cards) that impose inactivity fees, refunds and unused currency to states or regulatory statue in different states, now apply this to the global online stage. Then throw in the 2009 Credit Card Accountability Responsibility and Disclosure Act and the state and federal gift certificate taxes and were do Bitcoins and others fit in. This could be a big financial mistake for budget starve cities, states and countries it’s a worldwide problems. mobile_transaction_01

So how does a merchant handle Digital currency if they decide to accept it for legal goods and service. For example My Book is for sale on my website using Mt.Gox BTC-Bitcoins – So how do I report my Bitcoins Sales 1.8 BTC so how does the Tax man handle the BTC-Bitcoin transaction?? If they accept Bitcoins then they are legal tender as long as I show sales and pay my Tax they now become legal tender by the State, and federal governments??? Right or is Bitcoin just like a Cash sales??? – These are the questions that need answers today, not tomorrow. I would think that governments may be losing revenue if they don’t think about how to handle virtual currencies transactions and incorporate them into the grand scheme of things (also known as red tape).

As smartphones and mobile pad devices increases worldwide more and more global customers are jumping on board. In the Asian gaming world it’s unstoppable people cannot not stop the online addiction and at a such a cheap price people in far away places are getting connected and this new market is a gem for corporations worldwide and e-currencies of any kind will be the new norm. This Jump in mobil devices and games alone will give digital currencies a gigantic boost. These new inexpensive mobile devices are taking farmers in remote villages and bringing them to our modern society very quickly. merchant_Cards

Mobile devices are going worldwide today reaching the remotes corners of civilization and connecting everyone. And they want to spend $$$$$- money- $$$$$

This new mobile computer platform is changing the social and financial aspect of the worldwide landscape. All digital currencies that users accept in and believe in will be accepted. Merchants cry —I don’t care how you pay me as long as you pay me. The privacy aspect of this new currency is another thing that makes this very attractive. When anyone (governments/hackers) can pull your bank records and see every transaction you made.

They know everything every transaction? do they ? -did you know that with Bitcoins all transactions are visible – so we all know someone paid 1.2 BTC and transferred it to wallet_X. You can create a new -alias-wallet for every transaction and this way nobody will ever see your real wallet number. We can hide the wallets, encrypt it, back it up in paper, we can have many wallets and change them so keeping your transactions private is free it comes with the Bitcoin protocol. This is why governments say that terrorist use Bitcoins and other digital currencies to do their evil business,-NAW- well a suitcase full of CASH does the same thing and without and exchange rate to transfer it to my fiat currency… so that fear tactic does not work.. next

Consumers and merchants demand and acceptance of new digital currency has begun and the “jeane is out of the bottle”. These new digital virtual currencies can have very positive aspects in terms of financial innovation and the provision of additional payment alternatives for consumers and that is real competition.

Japans Moba-coins are a fine example: “While popular gambling-style kompu gatcha titles — in which users pay for coins to win prizes — are being eradicated from Japan, DeNA notes that its Moba-coin virtual currency was nonetheless used in a record $689 million worth of transactions in the country”. this revenue stream is only from 40-50 million users imagine when we all hop on this bandwagon.

money009There are many examples of others developing virtual currencies for gaming: NHN Japan offers a global gaming virtual currency called Line Coins; KakaoTalk in Korea offer virtual currencies called Chocos; and Tencent’s Q-Bi in China is firmly entrenched as a virtual currency. All of these are driven by mobile internet gaming services and the real killer will be when the major payments processors get into the virtual payments space.

The legality of Bitcoins have been debated all year long around the world -France, UK, Brazil, United Sates, California, New Hamshire, New York City, Germany, Finland, Italy and even Franklin, TN, USA.

As the price of Bitcoins hovers around $13-14-USD from a low of $4.5-USD this summer. It has attracted the interest of Forex and other players. With the European Central Bank (they control the EURO) report on Bitcoins to be a real thing are getting serious. Then a month later Bitcoin-Central ( French company, Paymium ) becomes the first Bitcoin Bank to carry out functions of payment service provider like PayPal and Dwolla unit of currency. Remember Bitcoin was built to operate completely outside the influence of governments and financial institutions but now Bitcoin is a financial institution.

Whether Bitcoin takes off or not is not the question, some virtual currencies is going to explode thanks to merchants, consumers, in-app gaming via social media and things that have not been created so far. You may disagree, but the aggregation of large amounts of small payments is effectively building a virtual currency system. go to https://blockchain.info and watch the transactions live, check out the “Bitcoin Top100 Recent Transaction”, I seen 124k, 150k 100 times in 1 hour-/ of course trying to track the wallets down to and IP is kinda impossible but mistakes can happen. https://blockchain.info/largest-recent-transactions   network

As we are seeing in New Hampshire allowance to take Bitcoin for campaign contributions put’s Bitcoins directly in the U.S bulls-eye. After this latest presidential election cycle here in American we saw that money is the language of politics and Bitcoins will play a role in our next presidential race 4 years away. Oh did I mention that Bitcoin is only 4 years old on Jan 9. 2013 imagine what the virtual digital currency and Bitcoins will look like in 2016. So are Bitcoins sales like a cash type transactions for governments and are they legal. I think that it’s still in debate but governments running deficits should allow any currency that brings in taxes to the coffers. Are Bitcoins Legal – stay tuned -gAtO OuT

Bitcoinica Rise and Fall from grace:

http://www.bbc.co.uk/news/technology-19244210

Superior Court of California, County of San Francisco

Case Number: CGC-12-522983

Title: BRIAN CARTMELL et al VS. BITCOINICA LP, ALSO KNOWN AS BITCOINICA et al

Cause of Action: CONTRACT/WARRANTY

Generated: Dec-18-2012 6:32 pm PST

http://webaccess.sftc.org/Scripts/Magic94/mgrqispi94.dll?APPNAME=IJS&PRGNAME=ROA22&ARGUMENTS=-ACGC12522983

 

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/12/mobile_transaction_01.pngDigg ThisSubmit to reddit
10/31/12

Happy Satoshi Nakamoto -Bitcoin- Day Nov 1

gAtO wAs- thinking about one of my heroes SATOSHI NAKAMOTO only 4 years ago November 1, 2008 he posted the research paper describing a new digital currency called BITCOIN. He cracked the problem that had stumped cryptographers for decades a DIGITAL CURRENCY convenient and untraceable with no over site from any government or bank.

STOP RIGHT HERE -money $$ with – NO GOVERNMENT  – NO BANKS

gAtO’s –> gAtOmAlO sAy – I am Satoshi Nakamoto

Ecash was the first as early as 1990’s but they failed because they relied on governments, banks and credit card companies. Banks and governments own us, the bank owns your house that your paying off, You pay tax’s on your property while the bank owns it. We all pay interest and the bankers live only for interest.

As anyone can see it’s in the best interest of all banks and governments that all world wide digital currency fail, unless they control it. It’s NOT only numbers, math and cryptology that makes these bankers shake in fear. But losing control of peoples moneys. Who Wins?  It’s the people immune to printing press happy -Federal Reserve bankers having all the control. The bankers cannot control this new digital currency control by people that have Nose rings -/ so they vilify these people -/cyberpunks that spread the word of their guilt. They make Bitcoins evil- Wikileaks is evil -the scum in the black market like Silk Road-  and Black MArket Reload use it so it’s evil –with your logic all Bitcoin is evil,

So congressman, senator when you paid that hooker on our tax dollar, when you pay the young man to have sex with you from Ohio – the swing state –/ the US  money you use is as EVIL as Bitcoin because it was used in a evil crime…. Evil is evil, money is money. simple to gATO sorry I rage—-

Political pressure has been payed by the banker to People like Senator Schumer which I used to like SCREAMED at the DEA to SHUT DOWN Silk Road which he called “the most brazen attempt to peddle drugs online that we have ever seen” – Yeah Silk Road is still ONLINE last I check. I guess the DEA can’t mess with cryptology and math. It’s science guy’s it basic and simple and elegant and it works. Tor onion network uses math and cryptology and it works so why can’t a digital currency like Bitcoin work.

BITCOIN CANNOT WORK – it’s beta software boy and girl – SATOSHI told us before he disappeared (2010) as he appeared ” in mystery” . SATOSHI is a cult hero “invisivle and  anonymous”- he warned us when he saw Wikileaks use Bitcoins as a donation tool -(this was the introduction of BITCOINS to the whole wide world -/- that it was still to early -/Bitcoin was only 2 years old at the time/  – SATOSHI  final words were “Bitcoin is pocket change (21 Million max Bitcoins) the heat you bring (from the exposure to the gov’s and banks and the world) would likely destroy us at this stage”.

SATOSHI was trying to warn us that the Software Bitcoin is only the beginning of digital currency. As gAtO see’s it in his loco-world mind view —/ If the people control their own money, next people will want to govern themselves and THEY have seen the effects of the Arab Spring and other cases were “the people” took back their country back from currupt politicians. Follow the -DIGITAL currency – gAtO oUt 

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/03/gato_01-148x150.jpgDigg ThisSubmit to reddit
10/28/12

Cyber-War Digital -vs- Global Currency

gAtO rEaD - in Forbes – “Biitcoin Prevent Monetary Tyranny” -mEoW- Currency tyranny by global bankers and government can be down right ugly. They can shape debt into deliberate inflation, they can enforce persecutory capital control or even pre-arrange default – let’s not forget LIBOR manipulation and austerity against countries after they have ripped out all natural resources, install a puppet king and all that jazz —/ everything controlled by THE BANK CARTEL. On the other side of the coin..//

On Oct. 6 Susanne Posel reported -/ an attempt to hack into the U.S.A executive branch’s computer system through an unclassified network.  That’s the White House kitties with a simple “Spear Phishing” attack. They trolled for names of Top Military and government officials in Google’s Gmail account and got a few hit. Once again “Open Source Intelligence”  

- everything goes somewhere and gAtO (as well as others) goes everywhere.

A few days later the Iranians government blocked Gmail by government officials due to fears that Email can be a point of infection for attacks- I think that’s in the security 101 course

Bruce Schneier one of our cyber gods that knows what he is talking about say’s it best about chicken little screaming “the cyber Sky is falling” – STROKING CYBER FEARS – “Secretary Panetta’s recent comments are just the latest; search the Internet for “cyber 9/11,” “cyber Pearl-Harbor,” “cyber Katrina,” or — my favorite — “cyber Armageddon.” But Bruce says it best in his own words  “There’s an enormous amount of money and power that results from pushing cyberwar and cyberterrorism: power within the military, the Department of Homeland Security, and the Justice Department; and lucrative government contracts supporting those organizations. As long as cyber remains a prefix that scares, it’ll continue to be used as a bugaboo.”  -may I add-/ to make lots of MONEY in private-corporation and government contracts worldwide. Fear + Cyber Security = BIG $$$

Fear is what bankers see as Africa is the first country that is being targeted for the BitCoin virtual currency. Imagine the turmoil in Nigeria and other places in Africa it has had a history of unstable governments the idea of a digital currency is appealing… La-Times read -Africa — the next frontier for virtual currency?

BUT the Bitcoin is NOT ready People – [1] Satoshi warned us – it’s BETA software – It has only 21 Million bit coins and the last Bitcoin will be mined in 2040 – Governments and corporations have already started the propaganda that Bitcoin’s are EVIL. — 

The most important thing is, we must all be active in out lives to make the new future- They fear us “the people” will wake up and take control of our lives” – the new generation was born with a cell device in their hand and they are using it earlier and earlier to communicate.

The Cyber war that we see is not as bad as the Cyber War that is being fought with fear and propaganda because the bankers will lose control with – One World Currency – One World Government – that is what the hacktivist want, the new kids, the new generation.

Cyberspace is the city of Babel and in this mystical city everyone was able to communicate to anyone and exchange idea, dreams and culture—/ but this cause the priest to lose control so they destroyed it and made it EVIL. It’s only Evil when you lose your power, It is EVIL when you give them control and power — it’s our turn now -gAtO oUt

References:

[1] Satoshi Nakamoto – Bitcoin Creator -https://en.bitcoin.it/wiki/Satoshi_Nakamoto

http://latimesblogs.latimes.com/world_now/2012/04/bitcoin-virtual-money-africa-rudiger-koch.html

http://www.forbes.com/sites/jonmatonis/2012/10/04/bitcoin-prevents-monetary-tyranny/ Bitcoin Prevent Monetary Tyranny

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/10/math_clouadTag.tiffDigg ThisSubmit to reddit
10/18/12

Tor hidden service secrets

Tor hidden service secrets

gAtO fRiDaY 10-18-2012 update hay you want to see a secret -hidden service -

Creative Hack – http://2kcreatydoneqybu.onion 

on top of this the name is custom – so that took extra time and efforts and the site is real when you have thier secret token — https://ahmia.fi/pagescreenshots/2kcreatydoneqybu.png

here you can take a look at this site anyway – try to extract any information from this secret Tor Website – you can’t see any source code – so you can’t make it error to extract information. I ask a friend that’s a Penn Tester to check this out – If anyone can extract any information please let me know –gAtOoUt

gAtO fRiDaY - sound off! - As i play with my new Tor hidden service – “Ok just apache website running https: a static site -right now” – What we know is that a Tor hidden service stays hidden until you send someone your .onion URL (example:- otwxbdvje5ttplpv.onion ) now once you know the URL your have access to the site. You may have to log in like on most bb sites but at least you reached the hidden service and now you can do stuff. 

While looking at the torrc file setting I found a little secret that with (server side) HiddenServiceAuthorizeClient-tag and the HidServAuth-tag on the (client) side -// your hidden service is now INVISIBLE to only the people that have a secret key installed in their “torrc” client file. In plain talk -

1. I put a special key on my hidden server – torrc file – HiddenServiceAuthorizeClient
2. generate a new key for client side – “what_ever_bcuuw46b3heyy”
3. send keys to the secret agents that can see or access the site HidServAuth
4. Only the people with my KEY can get to the front door of my hidden service – torrc file HidServAuth

This makes it hard to find the hidden service even if you have the URL ///./. it does nothing, no source code like a normal website. I ran into a few of these and had no clue why these sites behaved the way they did. I can pick apart most websites, at least, basics like html, asp, js, java directory you can gleam all kinds of information. But if you hit one of these site in Tor well it a big 0 -zero -///.

With my TDS project (Tor Directory Scan) I am generating an onion URL A-Za-z 2-7 URL and going out to scrape it and get some basic information about the site with a basic web crawler that grabs METADATA and not just links to other pages. If I hit these sites with my basic program I’ll get a dud -zero -///- but I will have a hit of sort. I hope to catch some of these sites – we all know the rcp command works well in Tor sometimes I found and httrack is another tool for sucking up site // be they hidden service or not – these secret hidden services will be very interesting in the scan -gATO oUt

— Tor Syntax

HiddenServiceAuthorizeClient auth-type client-name,client-name,…
If configured, the hidden service is accessible for authorized clients only. The auth-type can either be ‘basic’ for a general-purpose authorization protocol or ‘stealth’ for a less scalable protocol that also hides service activity from unauthorized clients. Only clients that are listed here are authorized to access the hidden service. Valid client names are 1 to 19 characters long and only use characters in A-Za-z0-9+-_ (no spaces). If this option is set, the hidden service is not accessible for clients without authorization any more. Generated authorization data can be found in the hostname file. Clients need to put this authorization data in their configuration file using HidServAuth.

—
HidServAuth onion-address auth-cookie [service-name]
Client authorization for a hidden service. Valid onion addresses contain 16 characters in a-z2-7 plus “.onion”, and valid auth cookies contain 22 characters in A-Za-z0-9+/. The service name is only used for internal purposes, e.g., for Tor controllers. This option may be used multiple times for different hidden services. If a hidden service uses authorization and this option is not set, the hidden service is not accessible. Hidden services can be configured to require authorization using the HiddenServiceAuthorizeClient option

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/06/tor_network_002.tiffDigg ThisSubmit to reddit