GoKawiil
Tech News
The Clop ransomware group has relaunched its dark web leak site at a new Tor address after ShinyHunters defaced the original server, exploiting an unpatched path traversal vulnerability in Grav CMS. ShinyHunters claims to have stolen source code, plugins, server logs and Tor private keys, and demanded a ransom, but Clop denies any contact with the group and disputes that sensitive data was taken.
A developer who previously built Onionservatory, a tool to audit Onion Service security configurations, has now released a companion tool called Onionspector. This new tool flips the perspective, showing users exactly what data points—from HTTP headers to browser fingerprinting signals like screen size, fonts, and Canvas/WebGL output—a website can collect about them when they connect, even over Tor.
A technical guide walks through configuring a Tor exit node on an Ubuntu 14.04 system, the type of relay that connects anonymous Tor traffic to the regular internet. It outlines the legal and reputational risks operators face, including potential harassment from ISPs and authorities, plus practical hurdles like sites blocking exit node traffic or forcing CAPTCHAs.
A security-conscious writer outlines a personal 'threat modeling' approach to web browsing, contrasting unmodified browsers like Chrome and Edge—which allow ads, trackers, and GenAI features by default—with a hardened Firefox configuration used as their daily driver. The setup blocks intrusive scripts, cookies, and third-party content on most sites while carving out exceptions for work tools like Google Workspace.