Slashdot Mirror

If you must use a typical browser, use https://start.duckduckgo.com/ for searches. Better yet, use the Tor browser with DuckDuckGo's onion address:

https://3g2upl4pq6kufc4m.onion...

Also use obfuscation addons, of course.

Here's a better link. Instead of trusting they don't track me, I prefer some additional assurance.

Also, taking down something that also exist on the TOR network as a onion address would be hard :
The Pirate Bay

And speaking of search engines take-downs :
Duck Duck Go, too is available as a onion address on the Tor network.
So similarily in the "not going to happen" category.

(And in an almost completely missing the point kind of irony, I've read that Facebook is also present as an onion on TOR, probably due to country where it is banned. I have no idea if the address is legit, though - too lazy and don't care enough to check it).

The flip side is that if any one of the exit points are monitored by an entity, and your browser traffic can be fingerprinted, they now have you on the radar, and can obtain data matching your fingerprint to a person from sites that collect the data (like online payment sites and banks, and ad aggregators that are partners with shopping sites).

This is explicitly addressed by TOR :
- TOR itself constantly changes routes. An entity that doesn't control all or a very large fraction of all exit nodes will only see occasional glimpses of out traffic.
- You are definitely not alone on TOR, some people simply use it for general anonymity or just for shit and giggles, meaning that your traffic will by mixed with traffic of lots of other people, even on the same exit-node
- TOR is a high latency network (multiple jump point)
- All of the above simultaneously make very hard to correlate input and output traffic.
Which is one way to diminish risks of de-anonymisation.

TOR also provides package with a Tor Browser, which is a special built of Firefox consigured to be as un-noticeable as possible (its fingerprints match an excessively large amount of other browsers), and includes additional measures to block other risk (Flash is blocked and thus a flash App could not be used to de-anonymise).
Means that any information that an entity could collect during the short glimpses on one of its controlled exit node will perfectly match hundreds of thousands of other browsers. (You can't rely on a trick like "which of your users have a browser that has the late 90s font Quake.TTF installed ? Which of these browser has Raetho-Romansh as a listed requested language ?", etc.)
This makes it horribly difficult to use fingerprints to match an user.

Again, If you're not hunted by the NSA, the FSB or the Mossad, chances are you won't be found on TOR.

Last and third peculiarity : .onion addresses.
Some server are entirely on the TOR network and do not require any exit-node to be accessed.
The Piratebay is a known example with http://uj3wazyk5u4hnvtk.onion/
Another one is DuckDuckGo with http://3g2upl4pq6kufc4m.onion/

Traffic to these addresses will NEVER leave the TOR network and cannot be witnessed by adversary-controlled exit-nodes.
As such, that's yet a third way de-anonymising is prevented.
Also, these addresses will prevent DNS-based access blocks. (They do not even point to an IP address, DNS are useless). So no matter how often someone tries to block Pirate Bay at the ISP level, the .onion address will be unblockable.

We already have solutions to turn off Google filter bubble censorship.

https://startpage.com/

https://3g2upl4pq6kufc4m.onion/
https://duckduckgo.com/

So now Dark Web means SMTP and FTP? Web? Web. *facepalm*

More seriously : Nope, not at all.

Dark Web has nothing to do with *what* you're talking to (usually websites, so usually HTTP/HTTPS),
but *how* you talk to (instead of opening a simple TCP connection between your laptop and a webserver, you send your request using some form of indirect complex hard-to-track routing. e.g.: TOR (The Onion Router)).

On the tor network, there are such things as tor servers which are accessed using a special address.
e.g.: Duck Duck Go has one.

From the outside, it doesn't look like your laptop is connecting to DDG's server.
It only looks like a bunch of tor nodes passing packets around.

At least in the case of Duck Duck Go, they also have an official DNS name that is registered to them, an IP address that can be backtraced to the server on the rack in the data-center where they are renting (or to the CDN that can then in turn further find them).

But some server only exist as obscure Tor keys. It's very hard to trace them in the real world.

Hence the name "Dark Web". The web of server that is hard to trace cause they don't work over plain vanilla TCP/IP.

It doesn't make sense that 85% of them suddenly stopped being greedy and slimey all of a sudden.

Every criminal thinks they will never get caught, or has already resigned themselves to the idea that it is part of the game. Some might have closed up shop, but 85%? I highly doubt it.

Not 100% of what goes on the dark web is criminal.

Take tor as an example:

Yes, some of them use .onion tor web services for the purpose of hiding ethically-dubious criminal activities.
(silk road used to be an example back then).

BUT, some use them for very practical reason like evading censorship (though it is *still* considered illegal in some specific jurisdiction, globally it's not and it's hardly unethical).
The popular Duck Duck Go search engine also has a .onion tor server.
If you're in China, and want to get informations about Tibet or the Tiananmen Massacre or simply about Taiwan, you can't through a normal search engine. They are either blocked in China or collaborate with the government and only report government-approved informations.
On the other hand, if you have access to the tor network (along with VPNs that's one of the few popular solutions to get around China's Great Firewall) you can search the web using Duck Duck Go's onion tor server. (And then read the source using your tor socks proxy).

As needs come and go, or because ressources are limited, some of these non-criminal dark web site are going to disapear.

http://3g2upl4pq6kufc4m.onion/

Tor's New Search Provider Built By Ex-Google And Ex-NSA Engineers

$$$

https://blog.torproject.org/bl...
^ https://blog.torproject.org/#S...

"New Search Provider[1]

Our default search provider has also been changed to Disconnect. Disconnect provides private Google search results to Tor users without Captchas or bans."

[1] https://search.disconnect.me/

$$$

"Disconnect Search, Built By Ex-Google And Ex-NSA Engineers, Lets You Use Google, Bing And Yahoo Without Tracking"

http://techcrunch.com/2013/10/...

FTA:

"notes Patrick Jackson, the ex-NSA engineer who is now CTO of Disconnect"

Yeah.. sounds like a good choice for a default TBB Search Engine... NOT!

$$$

-- On April 28th, 2015 Anonymous said:

"What prompted the change in search engine? Are we now getting paid to include disconnect as the default search engine?"

-- On April 28th, 2015 gk said:

"We don't get paid for that as it currently stands. But Startpage was not happy with our traffic and showed sometimes CAPTCHAs. Disconnect on the other hand approached us with respect to search engine traffic and donated some money."

Donated some money? Hahahahahhaaha. I wonder WHY they approached Torproject? You don't get paid for that CURRENTLY? Nice wording! But there was a DONATION, rrrriiiiight? I can't wait for future news! Please do let us know if and when you start collecting further $$ from the source.

I am insulted. I will continue to use Startpage's free web proxy service in TBB, and DuckDuckGo's .onion hidden service free search engine:

http://3g2upl4pq6kufc4m.onion/

So what's next, Torproject? Keystroke logging for Amazon or another company? Partnering with Recorded Future or something like it? Is this what the project has come to now? But that "Disconnect" Search Engine site is so pretty. So nice and clean, WOW! It sort of reminds me of the polished DoD sites I have wandered through.

$$$

Read Their Privacy Policy:
https://disconnect.me/privacy

Disgusting.

"I love how they "never collect your Personal Info, except when they do" and "never share your Personal Info (the one they didn't collect, remember?), except when they do""

$$$

With this new "Search Engine", I feel like a rug is being pulled out from underneath me and damn it "that rug really tied the room together."

Tor's New Search Provider Built By Ex-Google And Ex-NSA Engineers

$$$

https://blog.torproject.org/bl...
^ https://blog.torproject.org/#S...

"New Search Provider[1]

Our default search provider has also been changed to Disconnect. Disconnect provides private Google search results to Tor users without Captchas or bans."

[1] https://search.disconnect.me/

$$$

"Disconnect Search, Built By Ex-Google And Ex-NSA Engineers, Lets You Use Google, Bing And Yahoo Without Tracking"

http://techcrunch.com/2013/10/...

FTA:

"notes Patrick Jackson, the ex-NSA engineer who is now CTO of Disconnect"

Yeah.. sounds like a good choice for a default TBB Search Engine... NOT!

$$$

-- On April 28th, 2015 Anonymous said:

"What prompted the change in search engine? Are we now getting paid to include disconnect as the default search engine?"

-- On April 28th, 2015 gk said:

"We don't get paid for that as it currently stands. But Startpage was not happy with our traffic and showed sometimes CAPTCHAs. Disconnect on the other hand approached us with respect to search engine traffic and donated some money."

Donated some money? Hahahahahhaaha. I wonder WHY they approached Torproject? You don't get paid for that CURRENTLY? Nice wording! But there was a DONATION, rrrriiiiight? I can't wait for future news! Please do let us know if and when you start collecting further $$ from the source.

I am insulted. I will continue to use Startpage's free web proxy service in TBB, and DuckDuckGo's .onion hidden service free search engine:

http://3g2upl4pq6kufc4m.onion/

So what's next, Torproject? Keystroke logging for Amazon or another company? Partnering with Recorded Future or something like it? Is this what the project has come to now? But that "Disconnect" Search Engine site is so pretty. So nice and clean, WOW! It sort of reminds me of the polished DoD sites I have wandered through.

$$$

Read Their Privacy Policy:
https://disconnect.me/privacy

Disgusting.

"I love how they "never collect your Personal Info, except when they do" and "never share your Personal Info (the one they didn't collect, remember?), except when they do""

$$$

With this new "Search Engine", I feel like a rug is being pulled out from underneath me and damn it "that rug really tied the room together."

Tor's New Search Provider Built By Ex-Google And Ex-NSA Engineers

$$$

https://blog.torproject.org/bl...
^ https://blog.torproject.org/#S...

"New Search Provider[1]

Our default search provider has also been changed to Disconnect. Disconnect provides private Google search results to Tor users without Captchas or bans."

[1] https://search.disconnect.me/

$$$

"Disconnect Search, Built By Ex-Google And Ex-NSA Engineers, Lets You Use Google, Bing And Yahoo Without Tracking"

http://techcrunch.com/2013/10/...

FTA:

"notes Patrick Jackson, the ex-NSA engineer who is now CTO of Disconnect"

Yeah.. sounds like a good choice for a default TBB Search Engine... NOT!

$$$

-- On April 28th, 2015 Anonymous said:

"What prompted the change in search engine? Are we now getting paid to include disconnect as the default search engine?"

-- On April 28th, 2015 gk said:

"We don't get paid for that as it currently stands. But Startpage was not happy with our traffic and showed sometimes CAPTCHAs. Disconnect on the other hand approached us with respect to search engine traffic and donated some money."

Donated some money? Hahahahahhaaha. I wonder WHY they approached Torproject? You don't get paid for that CURRENTLY? Nice wording! But there was a DONATION, rrrriiiiight? I can't wait for future news! Please do let us know if and when you start collecting further $$ from the source.

I am insulted. I will continue to use Startpage's free web proxy service in TBB, and DuckDuckGo's .onion hidden service free search engine:

http://3g2upl4pq6kufc4m.onion/

So what's next, Torproject? Keystroke logging for Amazon or another company? Partnering with Recorded Future or something like it? Is this what the project has come to now? But that "Disconnect" Search Engine site is so pretty. So nice and clean, WOW! It sort of reminds me of the polished DoD sites I have wandered through.

With this new "Search Engine", I feel like a rug is being pulled out from underneath me and damn it "that rug really tied the room together."

Tor's New Search Provider Built By Ex-Google And Ex-NSA Engineers

$$$

https://blog.torproject.org/bl...
^ https://blog.torproject.org/#S...

"New Search Provider[1]

Our default search provider has also been changed to Disconnect. Disconnect provides private Google search results to Tor users without Captchas or bans."

[1] https://search.disconnect.me/

$$$

"Disconnect Search, Built By Ex-Google And Ex-NSA Engineers, Lets You Use Google, Bing And Yahoo Without Tracking"

http://techcrunch.com/2013/10/...

FTA:

"notes Patrick Jackson, the ex-NSA engineer who is now CTO of Disconnect"

Yeah.. sounds like a good choice for a default TBB Search Engine... NOT!

$$$

-- On April 28th, 2015 Anonymous said:

"What prompted the change in search engine? Are we now getting paid to include disconnect as the default search engine?"

-- On April 28th, 2015 gk said:

"We don't get paid for that as it currently stands. But Startpage was not happy with our traffic and showed sometimes CAPTCHAs. Disconnect on the other hand approached us with respect to search engine traffic and donated some money."

Donated some money? Hahahahahhaaha. I wonder WHY they approached Torproject? You don't get paid for that CURRENTLY? Nice wording! But there was a DONATION, rrrriiiiight? I can't wait for future news! Please do let us know if and when you start collecting further $$ from the source.

I am insulted. I will continue to use Startpage's free web proxy service in TBB, and DuckDuckGo's .onion hidden service free search engine:

http://3g2upl4pq6kufc4m.onion/

So what's next, Torproject? Keystroke logging for Amazon or another company? Partnering with Recorded Future or something like it? Is this what the project has come to now? But that "Disconnect" Search Engine site is so pretty. So nice and clean, WOW! It sort of reminds me of the polished DoD sites I have wandered through. Be sure to read the site's PRIVACY POLICY -- what a joke!

With this new "Search Engine", I feel like a rug is being pulled out from underneath me and damn it "that rug really tied the room together."

"When you enter a query into a search engine, you are providing the server with knowledge of your often very private interests. Your IP address and cookies make it easy for anyone determined to discover your identity as a person."

Maybe you're not connecting correctly. Here, try this one:

http://3g2upl4pq6kufc4m.onion/

Why should anyone trust you?

"When you enter a query into a search engine, you are providing the server with knowledge of your often very private interests. Your IP address and cookies make it easy for anyone determined to discover your identity as a person."

Maybe you're not connecting correctly. Here, try this one:

http://3g2upl4pq6kufc4m.onion/

Here it is, try logging me now!

http://3g2upl4pq6kufc4m.onion/

Name me another major web search engine with an official Tor onion endpoint. DDG is the only one I know.

https://3g2upl4pq6kufc4m.onion/
https://3g2upl4pq6kufc4m.tor2web.org/

They run a TOR exit enclave, and if you're already using TOR, you can reach their search engine without exiting the onion by using their hidden service

No they don't, and no you can't.

DDG's hidden service address is http://3g2upl4pq6kufc4m.onion/ Go there, enter a search, and check the address on your results page: https://duckduckgo.com/html

DDG's .onion address delivers nothing but the landing page. Check the source, that page is fairly bristling with URIs that pull content from, and deliver your form submit data to, the normal IP network. TOR will anonymize this traffic, duh, but the .onion landing page at DDG is nothing but a cheap gimmick.

Seriously, DuckDuckGo has the friendliest privacy policy around. They don't track you or bubble you. They run a TOR exit enclave, and if you're already using TOR, you can reach their search engine without exiting the onion by using their hidden service.

DuckDuckGo via tor:
http://3g2upl4pq6kufc4m.onion/

Newzbin via tor:
http://sc3njt2i2j4fvqa3.onion/

Slashdot, it's your turn.

Viewable with Tor installed, Search
Engine DuckDuckGo has erected a hidden service for secure, encrypted searches through the Tor network. While past attempts at hidden service search engines failed due to uptime or quality issues, DuckDuckGo marks the first time a real company operating a public search engine has offered a solid search engine as a hidden service for Tor users. Tor users may find DuckDuckGo's hidden service here.