<story><title>Tor 0day: Finding IP Addresses</title><url>https://www.hackerfactor.com/blog/index.php?/archives/896-Tor-0day-Finding-IP-Addresses.html</url></story><parent_chain><item><author>lilboiluvr69</author><text>Interesting article, but I don&amp;#x27;t see why it&amp;#x27;s titled &amp;#x27;0-day&amp;#x27; when he references a research paper from 2012.&lt;p&gt;&amp;quot;Although these are old, they are classified as zero-day attacks because there is no solution.&amp;quot;&lt;p&gt;They are?</text></item></parent_chain><comment><author>st_goliath</author><text>This is the same person who had a blog post on the front page ~2 months back, rambling about a JavaScript scroll bar issue, the fact that an ISP could block entry node traffic, and a few other things along those lines (&amp;quot;omg, 0 day!&amp;quot;):&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=23929312&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=23929312&lt;/a&gt;&lt;p&gt;Both blog posts probably ended up on the front page and got quite a bit of attention because the words &amp;quot;0 day&amp;quot; and &amp;quot;tor&amp;quot; were used in close proximity, something the author is apparently very fond of doing (the posts are part of a series titled &amp;quot;Tor 0day&amp;quot;).</text></comment>
<story><title>Tor 0day: Finding IP Addresses</title><url>https://www.hackerfactor.com/blog/index.php?/archives/896-Tor-0day-Finding-IP-Addresses.html</url></story><parent_chain><item><author>lilboiluvr69</author><text>Interesting article, but I don&amp;#x27;t see why it&amp;#x27;s titled &amp;#x27;0-day&amp;#x27; when he references a research paper from 2012.&lt;p&gt;&amp;quot;Although these are old, they are classified as zero-day attacks because there is no solution.&amp;quot;&lt;p&gt;They are?</text></item></parent_chain><comment><author>wp381640</author><text>Here is a technique that is used to uncover hidden services:&lt;p&gt;1. purchase VPS products at a bunch of providers who accept bitcoin &amp;#x2F; crypto&lt;p&gt;2. ddos your target&lt;p&gt;3. see if you notice any of your hosted boxes go down&lt;p&gt;4. once you know the provider pop them (they&amp;#x27;re usually running some shitty WHMCS or similar homebrew solution, old Cpanel, etc. etc. and they&amp;#x27;re almost always resellers and amateurs) and move laterally to your target&lt;p&gt;When the feds do it against online drug markets (and they have been for years) they have the bonus of having decent network insight &amp;#x2F; view by working with backbone providers&lt;p&gt;There is just no way to hide multi-Gb of traffic</text></comment>