21 Nov
2018
21 Nov
'18
10:28 p.m.
On 11/21/2018 12:37 PM, John Newman wrote:
https://nakedsecurity.sophos.com/2018/11/21/hacker-erases-6500-sites-from-th...
I don't know if the numbers are accurate, but it shows remarkable centralization of hidden services, which seems to (obviously) be a bad idea....
Indeed. See this thread: https://lists.torproject.org/pipermail/tor-talk/2018-November/044648.html Including this from the operator: https://lists.torproject.org/pipermail/tor-talk/2018-November/044650.html Basically, it was shared hosting, and he kept no backups, intentionally. I'm guessing that this was a standard shared-hosting privilege escalation. Also see my post: https://lists.torproject.org/pipermail/tor-talk/2018-November/044652.html