Hacker News Reader

> To know about such TorHS address the attacker must be running a malicious Tor Relay acting as a TorHS Directory, with Tor's code modified to dump from the RAM memory the TorHS list, then harvest them with an http client/script/crawler.

Given that, I think a case could be made that even doing this for research is acting in bad faith, if not "malicious."

View on HN

Tor hidden services announce their existence to their introduction points. The fact that they exist is not something Tor tries to hide. What they do try to hide is the location of these services.

Basically, if you don't want people to know that you're running a service over Tor then you're relying on a guarantee that isn't there. If you want to hide your location while announcing that you're running a service then you're relying on a guarantee that Tor actually claims to provide.

If this is research then given the above how is it "in bad faith" or "malicious"?

Reply on news.ycombinator.com