[tor-talk] How easy are Tor hidden services to locate?

[Griffin Boyce]

Juan Garofalo <juan.g71 at gmail.com> wrote:

> Roger wrote:
>
> >Hidden services are definitely weaker than regular Tor circuits, a)
> >because the adversary can induce them to speak,
>
>         Care to elaborate on that? You mean timing attacks (based on the
> fact that hidden servers 'speak' to clients?) ? Or the owner of the service
> leaking information about himself by mistake? Or?


  If a given service allows uploads, for example, it's frequently possible
to then upload something to broadcast the server address.  But if a server
is unpatched, or someone has some Apache 0day they've been saving up, it's
pretty easy to determine the location that way as well.

~Griffin