Hacker News new | ask | show | jobs
by TOMDM 229 days ago
It does make me wonder if people are running very boring polite websites that can suddenly do very not boring or polite things if you know how to ask the right way over an onion address.

Surely I can't be the only one to think of this right?
3 comments
jazzyjackson 229 days ago
In fact dozens of US spies and informants were killed or imprisoned when a secret communications network was exposed doing just that. I wish I bookmarked a better source, it described that the HTML for the portal was reused on every site, so once it was discovered on one site, everyone using it was burned.

Here's one article that alludes to it re: CIA informants in Iran, but I seem to remember China killing US spies and it just not making the news at all

"an analysis by two independent cybersecurity specialists found that the now-defunct covert online communication system that Hosseini used – located by Reuters in an internet archive – may have exposed at least 20 other Iranian spies and potentially hundreds of other informants operating in other countries around the world.

This messaging platform, which operated until 2013, was hidden within rudimentary news and hobby websites where spies could go to connect with the CIA. Reuters confirmed its existence with four former U.S. officials."

https://www.reuters.com/investigates/special-report/usa-spie...

link
throawayonthe 229 days ago
that seems unwise, you'd be associating your 'impolite' activities with an irl legal identity
link
tux1968 229 days ago
Well, you could use a disposable legal identity. Say a hobby site, about bowling.
link
bauruine 229 days ago
Tor does this sort of although not like you think. It's used as a bridge transport.

>https://blog.torproject.org/introducing-webtunnel-evading-ce...

>WebTunnel is a censorship-resistant pluggable transport designed to mimic encrypted web traffic (HTTPS) inspired by HTTPT. It works by wrapping the payload connection into a WebSocket-like HTTPS connection, appearing to network observers as an ordinary HTTPS (WebSocket) connection. So, for an onlooker without the knowledge of the hidden path, it just looks like a regular HTTP connection to a webpage server giving the impression that the user is simply browsing the web.

link