[Complaint/Warning] I'm pretty sure I'm able to determine which country some of the markets servers are in.

I haven't seen this discussed elsewhere and I'm really not sure how much of a security concern this is.

I was trying to reach one of the markets but kept getting the 'Server is not responding page'. This is the message you get when a market is completely down. I just figured it was temporary but has been going on for a few days. When markets are down there are a shit load of posts about it but I saw nothing. Than I noticed I was able to connect to some onions but not others.

I decided to check using a fresh TBB without the about:config changed and a stock torrc. Then I could reach all markets. So I started to implement my customizations one by one to figure out which one was messing things up. Turns out it was my torrc. I have the '14 eyes' countries excluded in my torrc.

So I enabled them all then started to exclude them from nodes one by one until I found the country that was causing me not to be able to connect. Would that be the country the server is located in? It was the only one that wouldn't allow me access to a market.

On a different note, I don't mind seeing posts warning about delayed deposits or withdrawals. But when I read a title like WHAT THE FUCK XXXXX IS FUCKING HOLDING MY MONEY then you get to the body and it's like I DID A WITHDRAWAL FROM XXXXX MARKET AND THEY HAVE MY .32 COINS AND ITS BEEN A FUCKING HOUR, you are either a kid or a giant asshole.


Comments


[4 Points] impost_r:

lol.

You're not connecting with the market directly so any setting you have set has no effect on this.


[6 Points] sharpshooter789:

I suggest you read how hidden services work.


[2 Points] Clix828:

This comment has been overwritten by an open source script to protect this user's privacy. It was created to help protect users from doxing, stalking, harassment, and profiling for the purposes of censorship.

If you would also like to protect yourself, add the Chrome extension TamperMonkey, or the Firefox extension GreaseMonkey and add this open source script.

Then simply click on your username on Reddit, go to the comments tab, scroll down as far as possible (hint:use RES), and hit the new OVERWRITE button at the top.


[2 Points] throwkasdjfkjahsdf:

You have no idea what you are talking about or how the tor network operates.


[1 Points] II-NataYmleg:

Why would you not be able to connect to nodes located in the country where the hidden service in question is physically located?

The best bet would be that your ISP selectively blocks Tor traffic, or certain IP geolocations, or simply employs a buggy DNS cache, with the result of random but superficially coherent observations and subsequent confirmation bias.


[1 Points] tex1s:

Want to see something even scarier that actually works?

It's called Geo-inference attacks using browser cache and Tor was found to be susceptible. Basically it allows for a website you are visiting to determine your neighborhood and even address based on your browser cache.