Someone Is Trying to Knock the Dark Web Drug Trade Offline (thedailybeast.com) 62
Joseph Cox, reporting for the Daily Beast: The dark web -- a pack of websites that hides their physical location with special software -- is always a precarious place, with the FBI shutting down massive criminal networks, or competing sites hacking one another. Now, someone is trying to take the four largest drug marketplaces offline, seemingly by flooding them with a torrent of traffic. These sites offer a mail-order service for pretty much any drug a customer could imagine, from LSD to varieties of heroin. As of at least Friday morning, several marketplaces were inaccessible or could only be visited from backup website addresses, and at the time of publication are still facing problems. It's not totally clear who is behind the outages, but the downtime has disrupted the dark-web community somewhat. "We are facing a DDoS attack atm [at the moment] and I guess many other markets as well," a Reddit moderator for the site dubbed Wall Street, one of the affected marketplaces, told The Daily Beast.
i noticed that, too (Score:3)
Probably ... (Score:4, Insightful)
Re: (Score:2, Interesting)
Sounds about right especially since these organizations funding anti drug programs and fighting legalization. https://www.usnews.com/news/articles/2016-09-08/fentanyl-maker-donates-big-to-campaign-opposing-pot-legalization
Re: (Score:3)
Not to mention that certain TLAs don't like it when you cut into the way they fill their "funding for special operations".
Re: (Score:3)
There's no real money in legitimate Oxy sales, it went generic a LONG time ago.
Where I'm sure they don't mind if their wholesalers do, Big Pharma dare not openly engage in illicit production and sales. Regulators would find out quickly if they did and poof, no profits...
Re: (Score:2)
There's no real money in legitimate Oxy sales, it went generic a LONG time ago.
Where I'm sure they don't mind if their wholesalers do, Big Pharma dare not openly engage in illicit production and sales. Regulators would find out quickly if they did and poof, no profits...
Oxycontin may be a generic now, but there's plenty of money in "Oxy" sales. It has just moved on into newer drugs that have "anti-abuse" additives (which don't work very well), more powerful versions for "intractable pain" (which gets prescribed for not-so-intractable pain), long-release versions, etc.
Re: (Score:3)
Plus, a local news story about the rising overdoses from Heroin mentions that the Heroin was TOO POWERFUL, because it was mixed with oxycodone.
Re:Probably ... (Score:4, Informative)
Somehow, I can't imagine heroin addicts buying their next fix over the internet. It seems more likely that they would need it to be delivered WAY FASTER, and they would eventually end up selling their PC/laptop/smartphone just to get money for their next fix anyway. Plus, a local news story about the rising overdoses from Heroin mentions that the Heroin was TOO POWERFUL, because it was mixed with oxycodone.
You would be surprised. Buying over the internet completely eliminates the risk of getting physically harmed during the transaction. The risk of being robbed is probably about the same. The risk of getting caught by law enforcement is probably less (for reasonably small quantities).
Desperate people living day to day probably aren't using the dark web, but such people probably aren't using Amazon Prime either. There are plenty of affluent drug users, if Hollywood is any indication.
Re: (Score:2)
Those Hollywood liberals and their drug use:
http://www.nytimes.com/2006/04... [nytimes.com]
Re: (Score:2)
Somehow, I can't imagine heroin addicts buying their next fix over the internet. It seems more likely that they would need it to be delivered WAY FASTER
It seems like you don't know that many heroin addicts are opioid addicts who couldn't get their prescription meds anymore (largely due to "the war on opiates"). They are accountants, lawyers, and insurance salesmen who had back surgery, etc.
Plus, a local news story about the rising overdoses from Heroin mentions that the Heroin was TOO POWERFUL, because it
Re: (Score:2)
Re: (Score:1)
I'm sure the pharmaceutical companies could care less about those using heroin. They're not their customers.
But, since you're on the whole "Big Pharma" canard, think of how much money those companies have left on the table by curing polio and small pox. Think of the money they could be raking in by not finding a solution.
Re: (Score:1)
Heck, why not blame Obama for it, as long as you don't have anything other than speculation.
Drug cartels are ... (Score:2)
... affected by the "Amazon Effect [slashdot.org]," as well.
U.S. stores have been closing at a faster rate in 2017 than at any time since the recession, an American phenomenon being dubbed "retail apocalypse." Though this has so-far been largely a worry for U.S. retailers, the Wall Street Journal reports that investors in Europe are worried that it is now spreading abroad.
Brick and Mortar retail wishes they could retaliate.
Re: (Score:2)
Re: (Score:2)
You think the dark web markets would get shut down if the CIA profited from them?
Re: (Score:1)
Re: Drug cartels are ... (Score:1)
pretty sure most of the cartels will have moved over to stealth tor services by now for general coordination and transactions. Opium to Russia/China is mostly US Army rather than cia, Opium into US mostly seems to be Chinese Army. for the rest of illegal pharma, a good portion of the market is private manufacturers with only limited resources. For example that scene in TED2 when they crash into the marujuarna field.
Re: (Score:1)
"with special software" ? (Score:1)
That reads like some CNN/NBC/ABC/FOXNEWS retard shit. What is this "special software" ? is it so special that it can't be named on slashdot? you know, news for nerds, who can handle the name of the 'special software'
Re: (Score:2)
Port 8080
Re: (Score:2)
It is unfortunate that you would have to fucking read to find out the name of the "special software," even though you already know what it is.
Bah (Score:1)
I'm waiting for the _new_ Dread Pirate Roberts.
I know, I keep using that word, but it _does_ mean what I think it means.
Re: (Score:2)
But, Wesley is dead.... Or at least mostly dead...
Re: (Score:3)
Flooding one end to find the other? (Score:5, Interesting)
I wonder if this is a way of finding the customers. The dark system may hide IP addresses, but if someone can affect the timing on one end, that itself can be a signal. If they can flood one end, maybe they can look for indications of that congestion at the other end.
Re: (Score:3)
Not really good enough. Many TOR sites, dark webbed and otherwise, have atrocious response times. You'd get too many false positives.
Not that this would discourage our current "arrest them all then have them prove their innocence" law enforcement strategy.
Re: (Score:2)
I wonder if this is a way of finding the customers. The dark system may hide IP addresses, but if someone can affect the timing on one end, that itself can be a signal. If they can flood one end, maybe they can look for indications of that congestion at the other end.
No one's interested in tracking down customers that way. There are too many of them and they are too small to bother with. The method of combating online illicit drug sales is to take down the sites, since using a collection of seized records makes it a lot easier to find the sellers, and the site owners are considered big fish.
Re: (Score:2)
How does this work? (Score:2)
Re: (Score:2)
They probably connect to a number of different nodes and DoS the onion address using those?
I can't be very sure though; It's 'specialized' software; lolz.
Piercing anonymity? (Score:5, Interesting)
This leads to an interesting question.
We know that the original dark-web protocol allowed state actors to pierce the veil of anonymity by traffic analysis. For example, even though packets were encrypted, you could follow packets of the same length to their destination. Do this multiple times, and you have a statistical certainty of the destination site.
That was fixed, and a similar technique with packet timing was also fixed.
I'm wondering now: can packet *volume* can be used to fingerprint a communication path?
Suppose you could flood a site through the Onion system, and also turn it on and off with a 1-sec resolution. Set up a pattern of on/off packet floods, then see which destinations get flooded during which seconds.
Can you then use traffic analysis to uncover the destination site?
Re: (Score:3, Informative)
Yes. Which is why it's a requirement of any serious anonymous protocol to send a random amount of traffic. This also translates into genuine uploads/downloads that will transfer at random speeds. It's still not enough because the fact that there is *a* destination translates into a target that can still be figured out by simply blocking routes until you can no longer reach said destination. It's why the more serious networks are decentral
Re: (Score:2)
Re: (Score:1)
Get it sent to your usual home address, with the name of a previous tenant/occupier. Plausible deniability. You'll be fine.
When did the definition change? (Score:2)
The dark web -- a pack of websites that hides their physical location with special software
The "dark web" used to mean websites that weren't indexed in any search engines.
Has the definition changed? Damn, I missed that memo.
Re: (Score:3)
Re: (Score:2)
The "dark web" used to mean websites that weren't indexed in any search engines.
Has the definition changed? Damn, I missed that memo.
You've missed nothing. Journalists just fail to grasp the difference between dark web and dark net and use them interchangeably.
You've missed something: users frequently use the two terms interchangeably now, too. Dark net, dark web, whatever, those are terms they're using for something more specific than their original use, but this is not incorrect, as the shady grey are markets in question fit either definition.
Is there some new site not being DDOSed? (Score:2)
Probably somebody testing traffic-analysis... (Score:2)
...to find out where the sites are. Normally, the traffic snooping needed to find a hidden service needs to cover a lot of the network. It is unclear whether it is actually possible to do. But maybe you can do better if you flood one or several high-responsiveness target sites, ideally with some very specific patterns. My guess is somebody is testing that now.
An alternate explanation would be that they try to trick the site operators into doing something hasty and stupid.