Dark Web Primer

An high-level primer on dark web tech (for non-developer end-users)

Transcript

1. what is? the dark web
2. what is the dark web ?
3. https://www.bibliotecapleyades.net/sociopolitica/sociopol_internet214.htm
4. https://www.quora.com/What-is-the-deep-dark-web-and-how-do-you-access-it
5. https://www.eff.org/pages/tor-and-https
6. IP, DNS, & HTTP threats • Hackers-in-the-middle • ISPs snooping on customers’ online activity • Governments censoring sites • Corporations scanning web logs for their competitors’ IP addresses • Criminal sites scanning web logs for law enforcement IP address
7. https://www.eff.org/pages/tor-and-https Location = IP Address
8. protects the user/pw & data from the intermediaries
9. https://www.eff.org/pages/tor-and-https
15. IP, DNS, & HTTP threats • Hackers-in-the-middle • ISPs snooping on customers’ online activity • Governments censoring sites • Corporations scanning web logs for their competitors’ IP addresses • Criminal sites scanning web logs for law enforcement IP address
16. How do we protect
 location + destination from intermediaries?
18. is a browser patched with The Onion Router
19. The Onion What?
20. https://www.torproject.org/about/overview.html.en
21. https://www.torproject.org/about/overview.html.en
29. Tor protection from DNS + HTTP internet threats • Hackers-in-the-middle • ISPs snooping on customers’ online activity • Governments censoring sites • Corporations scanning web logs for their competitors’ IP addresses • Criminal sites scanning web logs for law enforcement IP address
30. Download Tor !
31. Tor Demo
34. Tor users can still get hacked!
36. https://www.torproject.org/about/overview.html.en with public keys
38. https://www.khanacademy.org/computing/computer-science/cryptography/modern-crypt/v/diffie-hellman-key-exchange-part-1
39. Tor Encryption https://jordan-wright.com/blog/2015/02/28/how-tor-works-part-one/
40. Tor Encryption https://jordan-wright.com/blog/2015/02/28/how-tor-works-part-one/ Note: exit nodes can see the Original Data
41. hacked
42. hacked hacked hacked hacked
43. exit node threats = Man-in-the-Middle threats • exit node snooping on unencrypted data:
 user/password, PII, etc. • Hook browsers with BeEF • Backdoor binaries
45. protects the location, destination, user/pw, & data from the intermediaries
49. what is? the dark web
50. https://www.eff.org/pages/tor-and-https Location = IP Address
51. https://www.eff.org/pages/tor-and-https Location = IP Address
53. How do you set up ? Site.com
54. https://domain.me/how-domain-names-work/
55. https://domain.me/how-domain-names-work/
56. https://whois.icann.org/en/domain-name-registration-process
57. Not Anonymous
58. Not Anonymous
59. How do you set up anonymously? Site.com
60. You set up Site.onion
61. is a Tor Hidden Service Site.onion
62. a Tor Hidden Service uses a “rendezvous protocol” instead of DNS
63. https://www.torproject.org/docs/hidden-services.html.en
64. https://www.torproject.org/docs/hidden-services.html.en
65. https://www.torproject.org/docs/hidden-services.html.en
66. https://www.torproject.org/docs/hidden-services.html.en
67. https://www.torproject.org/docs/hidden-services.html.en
68. https://www.torproject.org/docs/hidden-services.html.en
69. Rendezvous Point
70. “Alice hears that XYZ.onion exists”
71. reddit.com/r/onions
72. the dark web demo