Krugtron9000
it’s weird that they are able to ddos an onion. i thought tor had pow mitigations?
I want to know about this too. Why didn’t you use HiddenServicePoWDefensesEnabled?
It’s only three hops if, like Trocador, you don’t need to hide the location of the server. They can (and should) enable HiddenServiceSingleHopMode. This hides the location of the client but not the location of the server. Six hops is only for darknet sites that need to hide the server location.
suffering non-stop DDoS attacks for the last three weeks, and they are using ToR exit nodes to conduct such attack
This doesn’t add up:
- Exit nodes are not involved in onion site visits. Exit nodes are only involved in connections from Tor to the clearnet.
- The tor network itself does not have a particularly massive amount of exit node bandwidth, and anybody trying to use a large fraction of that will attract the attention of the tor developers. I have a very hard time believing that the bits per second you can push through tor exits result in a bandwidth bill that a popular exchange (like yours!) has any difficulty affording.
Blink twice if you’ve been threatened by a three-letter agency.
Good luck,
WASM is the millennials getting their turn to learn that “those who do not learn from history are doomed to repeat it”.
Letting the bloated web offload more of its bloat to clients will simply result in an even worse web obesity crisis than already exists. The computational burden needs to stay with the side (the content producer) that has the ability to reduce the level of bloat. Anything else is a broken incentive structure.
This is precisely what Hashcash is. Hashcash is widely acknowledged as the primary ancestor of Bitcoin.
Also, Tor now has a system like this built-in. It uses PoW. It’s quite new (less than a year old) and you have to explicitly enable it, but I’m sure the trocador admins know about this.
But seriously, regarding enshittification, I don’t think javascript makes websites any harder to ddos. Rather, you get ddossed until you cry uncle and comply with the demands that you help MITM and fingerprint your customers. Javascript happens to be useful for fingerprinting. It has very little to do with ddos mitigation.
I can’t help hearing this spoken in Jack Nicholson’s voice during the first few minutes of The Departed (2006).
<monero> Freedom.
<jnicholson> Nobody gives it to you. You have to take it.
<monero> ok, will do.
I also don’t understand why websites are still using bespoke hand-rolled XMR payment frontends – unless they are exchanges or (like localmonero) super-Monero-gurus… BTCPay server’s Monero support is so good at this point… I have used it uncountably-many times and not once had any kind of problem.
Please folks, if you’re going to accept Monero, consider using BTCPay Server.
First, make sure the transaction was completed for the correct amount net of monero transaction fees.
Yes, I absolutely made sure of that. Even waited for all ten confirmations.
One
secureway to contact them is through matrix.
FTFY. And of course the (still!) embargoed clusterf*ck. Don’t roll your own crypto, kids.