that was shortly after intel exchange had been taken down.
Tor services just arent secure in any sense imho. especially not from the people who wrote them.
sigh.
Not the fault of Tor. HSDir nodes could snoop on announced v1 .onion adresses. This isn't the case anymore for Onion v2 addresses. But even if an attacker has the onion address of your webserver, he needs a way to compromise it.
Either through a vuln in your website or your webserver.
You're right, except you meant v3.
You would be amazed how many admins leave shit like PHPMyAdmin wide open.
In both cases you could run a honeypot to catch 0-days.
The only reason I spotted it was because I was checking for compromise by comparing any file/process changes every few weeks.
It was a few years ago, my guess back then was tor is the honeypot, given what happened recently with encrochat I wouldnt be surprised if a few years down the line it turns out it was.
Or maybe I misconfigured the server, or maybe the binary I used for tor was compromised, it was as much a test for whether I could trust tor as anything else and it failed. delete, move on.
that's very suspicious
dont get the more juicy military stuff, but it's much less effort.