Menu
Tor Project mulls how Feds took down hidden websites

Tor Project mulls how Feds took down hidden websites

The project doesn't have funding as yet to improve the security of hidden websites

Little is known about how U.S. and European law enforcement shut down more than 400 websites, including Silk Road 2.0, which used technology that hides their true IP addresses.

The websites were set up using a special feature of the Tor network, which is designed to mask people's Internet use using special software that routes encrypted browsing traffic through a network of worldwide servers.

Tor -- short for The Onion Router -- also allows people to host "hidden" websites with a special ".onion" URL, which are difficult to trace. But law enforcement appears to have figured out a method to find out where sites are hosted, a serious flaw that could pose risks to people who aren't running websites that sell drugs and weapons.

On Friday, the Department of Justice said it had shut down more than 410 hidden websites as part of "Operation Onymous" and arrested more than 17 people, including 26-year-old Blake Benthall, who is accused of running the underground marketplace Silk Road 2.0.

Hidden Tor websites have plenty of legitimate uses, and the Tor software for browsing is widely use by activists and others who want to protect their privacy.

But the use of hidden websites for selling drugs, weapons and fake passports has caused increasing concern since the first version of Silk Road was shut down in October 2013. And it appears law enforcement isn't eager to give away how it took down the hidden websites en masse.

The criminal complaint filed against Benthall doesn't reveal much other than saying that in May the FBI "identified a server located in a foreign country that was believed to be hosting the Silk Road 2.0."

The Silk Road 2.0 fell offline for some time as law enforcement officials in the country where it was located imaged the server and "conducted a forensic analysis of it," according to an affidavit included in Benthall's complaint written by FBI Special Agent Vincent D. D'Agostino.

Tor's hidden services have seen increasing use. Facebook recently announced it set up a ".onion" address to resolve performance issues some people experienced when using Tor with the social networking site.

Tor's development is overseen by The Tor Project, a nonprofit that relies in part on donations. The project "currently doesn't have funding for improving the security of hidden services," wrote Andrew Lewman, the project's executive director, in a blog post on Sunday.

"In a way, it's even surprising that hidden services have survived so far," he wrote. "The attention they have received is minimal compared to their social value and compared to the size and determination of their adversaries."

There have been various attacks developed by researchers over the years against Tor that could compromise someone's privacy, Lewman wrote. It is possible that a remote-code execution vulnerability has been found in Tor's software, or that the individual sites had flaws such as SQL injection vulnerabilities.

But Lewman wrote The Tor Project had little information on the methods used by law enforcement in the latest action.

"Tor is most interested in understanding how these services were located and if this indicates a security weakness in Tor hidden services that could be exploited by criminals or secret police repressing dissents," he wrote.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags The TOR Project

Events

Why experience is the new battleground for partners

Join us for an exclusive webinar, in association with Hewlett Packard Enterprise and Technology Services Industry Association (TSIA) and learn about the latest industry insights and how technology services continue to evolve to deliver differentiated value, and how partners can be successful in 2021 and beyond.

Featured

Slideshows

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

Hundreds of leaders from the New Zealand IT industry gathered at the Hilton in Auckland on 17 November to celebrate the finest female talent in the Kiwi channel and recognise the winners of the Reseller News Women in ICT Awards (WIICTA) 2020.

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards
Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

The leading female front runners of the New Zealand ICT industry joined together for the annual Reseller News Women in ICT Awards event at the Hilton in Auckland, during which hundreds of guests celebrated 13 outstanding individuals who won awards, chosen from more than 50 finalists representing over 30 organisations.

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards
Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

More than 500 channel leaders gathered in Auckland on 21 October at the ​Reseller News Innovation Awards ​2020 to celebrate the achievements of the New Zealand technology industry's top partners, start-ups, vendors, distributors and individuals.

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners
Show Comments