<story><title>Someone Is Crawling TorHS Directories: Honeypot</title><url>https://lists.torproject.org/pipermail/tor-talk/2014-September/034751.html</url></story><parent_chain></parent_chain><comment><author>danbruc</author><text>Here [1] is some research on enumerating hidden services. It would be shocking to me if no one would regularly enumerate hidden services given how cheap it may be.&lt;p&gt;&lt;i&gt;We have demonstrated that collecting the descriptors of all Tor hidden services is
possible in approximately 2 days by spending less than USD 100 in Amazon EC2 resources.&lt;/i&gt;&lt;p&gt;As far as I know this will no longer work because Tor implemented appropriate changes but there are probably other ways to do it.&lt;p&gt;[1] &lt;a href=&quot;http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;www.ieee-security.org&amp;#x2F;TC&amp;#x2F;SP2013&amp;#x2F;papers&amp;#x2F;4977a080.pdf&lt;/a&gt;</text></comment>
<story><title>Someone Is Crawling TorHS Directories: Honeypot</title><url>https://lists.torproject.org/pipermail/tor-talk/2014-September/034751.html</url></story><parent_chain></parent_chain><comment><author>MichaelGG</author><text>Why &lt;i&gt;must&lt;/i&gt; this be malicious? It could be a researcher, or someone interested in building a hidden service index, etc.</text></comment>