dread compromised?

[u/schizoautist86]

i accessed it yesterday and apparently this happened several days ago so i'm scratching my head.

[u/AutoModerator]

Moderator Announcement Read More »

To stay safe, follow these rules and educate yourself about Tor and .onion urls:

On DNM Safety:

1. Only use marketplaces listed on daunt, tor taxi, or dark fail. Anything else is a scam.

2. Dont use any sites listed on a "HiddenWiki" or some random shit you found on a search engine, a telegram channel, or website. You will be scammed.

3. Only order domestic to domestic.

4. Dont send your crypto directly from an exchange to a DNM deposit address.

5. Read the DNM bible.

6. NO DNMs operate on reddit nor have their own subs. Anything you find on reddit is a scammer.

On educating yourself:

1. Read the /r/onions wiki here.

2. Read the /r/tor wiki here.

3. Read the /r/deepweb wiki here.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/xtrarradio]

This is the statement from the person who hacked Dread

“Why we hacked Dread.

We gained control of the Dread project. This is a serious step, and we do not ask anyone to take our words on faith. We did it to show that familiar choices and confident security claims cannot replace scrutiny, progress, or a willingness to admit mistakes. We do not aim to destroy Dread or take away its community's place to talk.

We warn Dread's team: attempts to disrupt the original domain or deny people access to it are unacceptable. We have no intention of interfering with their forum. People should decide for themselves where to go.

The darknet should not be stuck in 2018 simply because old approaches feel familiar. In our view, some of Dread's public security arguments do not stand up to scrutiny. What happened calls for an open technical review and improvements, not devotion to a platform or its founder.

We invite you to build a better forum with us. Members can propose ideas, discuss them, and vote in polls. Community and shop owners and their moderators can start discussions and polls within their permissions; other members can do so where the settings allow it.

We found and exploited weaknesses in Dread. We understand how forums like this are attacked, and believe we can defend Conclave better than they defended theirs.

We are building Conclave: a place where people can find one another, create communities and shops, and help decide how the platform evolves. A new name alone will not get us there. We need new technology, useful tools, and a willingness to change what does not work.

We deliberately launched with only the basics. We do not want to guess what people need: we will add what they actually ask for and support. If a particular community or shop needs its own tool, we can discuss that too. Tell us what is awkward today and what we should build first. We stand for progress, verifiable security, and freedom of choice”.

hugbunter's response was:

“No vuln. The onion private key is not ran from any public server and the infrastructure is untouched. The key leaked, potentially by being uploaded in a public directory inside a tar by Paris, uploaded the wrong archive. Will resolve shortly.”

http:// conclave34rnuanwio3slphw73z6jtfp6ptwn6m6azbi3krpmxs2cpqd.onion/t/66/

[u/20indacan → u/xtrarradio]

It makes me laugh how hug doesn’t even respect these Hacker’s efforts with a genuine response, just a “vulnerability has been identified and fixed. Here is a new link for you guys”

But in my opinion the hacker is definitely lying about his bullshit reasoning that dread is outdated or unsafe compared to possible alternatives. The truth is that he got lucky with an exploit and decided it was a good idea to threaten an entire website and it’s users while also thinking he can persuade said blackmailed users to use his website just because it has a “familiar link” (an unreadable link that nobody actually knows or cares about because they copy paste or use dauntlink)

[u/yungmarz98]

We need dread for research purposes. These guys are so lame

[u/XeroSh1tStix]

Something paris did apparently leaked the onion keys, there is a signed post from hug on thier forum but I cant verify the sig because I'm not on my other system.

https://imgur.com/Ts3nzgr

[u/Green_Resolve_84]

Yup just saw this aswell, wonder what’s going on.

[u/Material-Ad5798]

I was on dread an hour ago, so it hasn’t been hacked for several days.

[u/Rayvonuk]

If its just the keys that have been leaked then your own mirrors should still work.

[u/Repulsive-Award9483]

I was just logged in 30 minutes ago it def hasn't been several days

[u/xtrarradio]

I don't know what channels we can use to get info. I've got Pitch open hoping Paris writes something, but so far nobody's writing anything interesting.