Updates on DNM/TOR DDOS

Has anyone heard from Agora, Ironclad, MEM, Nucleus, or other DNM admins today? Are they experiencing DDOS attacks still? Can they even distinguish between DDOS attacks versus floods of user traffic?

Both Alphabay and the UH Wiki have reported this from their logs in regards to the DDOS:

[Warning] Invalid result from curve25519 handshake: 4*

[Warning] onion_skin_client_handshake failed.

[Warning] circuit_finish_handshake failed.*

[Warning] connection_edge_process_relay_cell (at origin) failed.*

  1. Do those log entries mean anything? /u/select1on did you get a chance to look at your logs yet?

  2. Do we know for sure there are DDOS attacks in process on the markets? Or are some people still thinking that it is just an influx of users post Evolution.

  3. What will happen if these attacks do not stop? Can the marketplaces function with such high levels of downtime and instability?

  4. Have the Blankbank admins weighed in on why their site has remained so stable?

  5. Did the DDOS's on SR1/2 brings the sites down? How long did those attacks last?

  6. Any further clarification whether TOR is being attacked as a whole, or it is just the DNM's specifically.


I am very curious as to what happens this week - really thought things would go back to normal today - it has been quite a few days. Much longer than the normal and expected downtimes.

Ask your questions here and let's try to get some answers - or at very least consolidate once again what IS actually known, what DNM Admins have stated today (or see if they will comment), and possibly get some thoughts from our Reddit DNM scholars.


Comments


[9 Points] None:

[deleted]


[10 Points] AgoraMarket:

Or are some people still thinking that it is just an influx of users post Evolution.

This has little, if anything, to do with former Evolution users.

Evolution collapsed on March 18th; Agora ran just fine for about 5 days afterwards, with registrations open no less. Then "something" happened (DDOS), and it has just ground to a halt. I don't know why Agora's little blue bar warning mentions Evolution, at best they're a small part of what's going on now IMO. Based on subreddit traffic, I doubt Evolution users simply waited around for 5 days twiddling their thumbs before deciding en masse to make Agora accounts.

For all their praise about security and OPSEC, they are beyond sub-par at public communications. No idea why it takes a full week (and counting) to get everything sorted. They need to say something besides a two-line comment that hardly anyone can see anyway, because they can't even log in.


[1 Points] None:

[removed]