The talk: http://youtu.be/uU2NoCGQBHc

1. The Onion Router && Deep Web
Gabrielli Gianluca
Xmpp+OTR: gianluca.gabrielli@autistici.org
GPG PubKey: http://goo.gl/SLfDBX
27B0 013E 95F8 644D 35A5 93B0 0E07 A068 E9F0 2F91
gianluca.gabrielli@autistici.org

2. Internet
gianluca.gabrielli@autistici.org

3. DeepWeb
ClearNet
<
>
gianluca.gabrielli@autistici.org

4. Iceberg
gianluca.gabrielli@autistici.org

5. The Dark Side of the Deep Web
gianluca.gabrielli@autistici.org

6. Deep Web
gianluca.gabrielli@autistici.org

7. Installazione TOR
Internet
gianluca.gabrielli@autistici.org

8. Installazione TOR
gianluca.gabrielli@autistici.org

9. Check your IP
TOR
TOR
gianluca.gabrielli@autistici.org

10. TOR
Cenni storici
“Per me è la cipolla.”
Pedro su TOR
gianluca.gabrielli@autistici.org

11. TOR
Cenni storici
Tor nasce da un progetto dagli U.S. Naval Research Laboratory, come
strumento dedicato alla mirina militare.
Era un servizio primario per la protezione delle comunicazioni
governative.
Oggi è un progetto open-source disponibile per chiunque. Viene utilizzato
da giornalisti, militari, forze dell'ordine, whistleblower, infiltrati e
sopratutto dagli hacktivisti.
gianluca.gabrielli@autistici.org

12. How does TOR work?
- Proxy
- Crittografia Asimmetrica
- Digital Mixing
gianluca.gabrielli@autistici.org

13. Proxy
google.com
You
(italy)
google.com
You
(italy)
Proxy
(India)
gianluca.gabrielli@autistici.org

14. Proxy
Proxy
(India)
Proxy
(UK)
google.com
You
(italy)
Proxy
(Portugal)
gianluca.gabrielli@autistici.org

15. Crittografia Asimmetrica
gianluca.gabrielli@autistici.org

16. Digital Mixing
A
E
B
D
C
D
C
gianluca.gabrielli@autistici.org
E
B

17. Digital Mixing
C
E
D
B
A
B
C
gianluca.gabrielli@autistici.org
D
E

18. Digital Mixing
A
E
B
D
C
D
C
gianluca.gabrielli@autistici.org
E
B

19. Digital Mixing
gianluca.gabrielli@autistici.org

20. TOR
gianluca.gabrielli@autistici.org

21. Digital Mixing
A
E
B
D
C
D
C
gianluca.gabrielli@autistici.org
E
B

22. TOR
gianluca.gabrielli@autistici.org

23. TOR
gianluca.gabrielli@autistici.org

24. TOR
gianluca.gabrielli@autistici.org

25. TOR
gianluca.gabrielli@autistici.org

26. TOR
gianluca.gabrielli@autistici.org

27. TOR
gianluca.gabrielli@autistici.org

28. TOR
gianluca.gabrielli@autistici.org

29. Hidden Services
gianluca.gabrielli@autistici.org

30. Hidden Services
Directory
Server
xyz.onion
IP 1-2
IP 1
IP 2
gianluca.gabrielli@autistici.org

31. .onion
=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.gabrielli@autistici.org

32. .onion
Riassunto = Hash(
Riassunto.onion è l'indirizzo
gianluca.gabrielli@autistici.org
)

33. Hidden Services
IP 1-2
Directory
Server
xyz.onion
xyn.onion?
Re
IP 1
Re
IP 2
gianluca.gabrielli@autistici.org

34. $sleep 15m
gianluca.gabrielli@autistici.org

35. A little bit more
●
●
●
L'accesso a TOR può essere bloccato facilemente =(
Esistono hidden services dei quali la parte inziale
dell'indirizzo è il nome del servizio stesso.
Ad esempio:
- cipollatnumrrahd.onion la comunity Cipolla
- silkroad5v7dy***.onion SilkRoad 2.0
- babylonxjrtdyomy.onion Babylon altro forum italiano
Vengono minati, come si minano i bitcoin.
Il DeepWeb non è indicizzato
gianluca.gabrielli@autistici.org

36. Warning
TOR non ci protegge da noi stessi! So don't be stupid...
-
DNS
JavaScript
Flash (Action Script)
Metadati
User agent
gianluca.gabrielli@autistici.org

37. DNS
Server DNS
xnxx.com
aka
141.0.174.34
141.0.174.34
Chi è xnxx.com?
gianluca.gabrielli@autistici.org

38. DNS
Server DNS
Chi è xnxx.com?
xnxx.com
aka
141.0.174.34
141.0.174.34
gianluca.gabrielli@autistici.org

39. Js && Flash
Fake by FBI
Server CSS
Altro server FBI
gianluca.gabrielli@autistici.org

40. Soluzione
Spesa totale circa 14€
gianluca.gabrielli@autistici.org

41. Soluzione
gianluca.gabrielli@autistici.org

42. Metadati
Guardatemi, sono un
H4Ck3r
gianluca.gabrielli@autistici.org

43. Metadati
-
Data
Ora
Coordinate Geografiche
Marca macchina fotografica
Modello macchina fotografica
ISO
Apertura diaframma
Tempo d'esposizione
gianluca.gabrielli@autistici.org

44. The End
Grazie per la
vostra
attenzione!
gianluca.gabrielli@autistici.org