Sarah Jamie Lewis

It just struck me that likely lots of things happened in the world since Friday Morning...and I have no idea what they are.

The rest of the databases get smaller very quickly. It's going to take more time to analyze them because they are all so small.

Only 6 databases contained >100Mb of content. And most of those aren't very interesting at all - one appears to be filled with error logs.

It appears that the largest database in the dump was of a forum that facilitated the distribution (but didn't host) of CSE images/videos.

So, looks like the FHII dump contains ~24k tables. This is going to take a while...

And if you are a recruiter for <tech company> - Thanks, but I'm not looking for a full time position right now.

I should add: unless if your email was about new projects then I probably won't answer for a few days.

Ummm...I think I've got through my DM/email backlog now... If you haven't heard from me, were expecting to/still want to; please email me.

Look like I'll be speaking about the Dark Web, Correlations & Deanonymization at @BSidesVancouver in March!

And hopefully this will inspire some people to work on some cool tech to help non-technical users publish stuff anonymously.

For now, I hope that we take this as a warning of the dangers of centralizing anonymity things & darknet web hosting.

We do also have to remember that many lives are tied up in that dump. From all across the spectrum of people.

Setting the ethics aside - A dump of so many site backends is likely a treasure trove of information regarding how people engage with site.

There have been a few studies in past looking at the number of requests for a given hidden service, and these are the best we have.

We don't really have a good idea about what dark web tech is being used for...edspecially outside of the markets & CSE categories.

Another thing worth talking about is the research potential of this dump.

Oh look I said this before:https://twitter.com/SarahJamieLewis/status/768502632826548224 …

I have never been a fan of dark web hosting providers. The threat model there for everyone is ridiculously hard to secure.

FHII made it easy for people to start playing with anonymous publishing - and in doing so created a huge vulnerability.

As an analogy: it's like someone taking down geocities in the late 90s... Sure there was lots of crap, but also lots of diverse content.