[Tor2web-talk] CryptoLocker: How to best deal with them?
Fabio Pietrosanti - lists
lists at infosecurity.ch
Wed Nov 5 22:59:11 CET 2014
Hi all,
sounds like the CryptoLocker is causing some major issue to Tor2web,
with takedown and hardcore abuses to/from ISPs.
Now, what's the best strategy to deal with them?
They change quite often the TorHS, so it doesn't work to filter them all
using current blocklist.
We may look for implementing content filtering based on Regexp
https://github.com/globaleaks/Tor2web-3.0/issues/151 , but it may have
some important performance issue (and cryptolocker guys would anyway try
to bypass it).
So, from a real-world perspective, ideas on how to better deal with such
issue?
--
Fabio Pietrosanti (naif)
HERMES - Center for Transparency and Digital Human Rights
http://logioshermes.org - http://globaleaks.org - http://tor2web.org - http://ahmia.fi
More information about the Tor2web-talk
mailing list