Wednesday, August 7, 2019

Dark Web. Why?

"But even on the dark web, companies need service providers to keep their sites up reliably. And the 8chan site was only intermittently available and slow to load, making it nearly impossible to click on the site’s links." https://www.independent.co.uk/life-style/gadgets-and-tech/news/8chan-el-paso-shooting-cloudflare-gunman-forum-facebook-cybersecurity-a9043966.html

Very, very interesting. Service providers on the dark web.

For those who don't know what that is. The way i understand it.

Internet is nothing but routers, some big, some small, with connections in between. At the ends are either user devices on wi-fi routers or servers which hosts web sites (a servers is nothing more than a computer with no display or keyboard). It works both ways (you could, theoretically, host a web site on a small device linked to your personal router, if you have enough speed or bandwidth for it (or it may become slow). For each demand, you have to have that amount of megabits per second to give it to them (download, whatever).

Every device (or web address within a server) linked to the internet has a unique web address (IP address or number) allocated by IANA (Internet Authority). Big providers have ranges of addresses assigned by IANA they give to normal users at the time they connect, address that may change if you reset your box or router but still within that range. The address allocated in that known range is traceable to you.

Could had been different, could had each person an address linked to their name or physical address like a phone number, but they chose it this way allowing much more anonymity.

When you click on a link. Usually links lead to pages within websites which websites have unique IP addresses (given by IANA). But those addresses are not hard-coded in links. In links are hard-coded only so called domain names, like google.com. Your browser has to find or resolve that IP address before it can download the content in the link. And that is done through DNS servers. Here and there at some dead ends on the internet where mainly the internet providers, others, choose to put servers with long lists of domains next to IP addresses for them. So your browser, when you click a link, first has to go to a DNS server (with a known address, always the same, which IP address is usually hard-coded in your personal router), get the IP address for that domain name and then issue a download request for that page using that IP address (and path to the page within).

How such a request gets to the server. How the page gets back to you to you. Internet data including requests is packed in packages of limited known sizes with the IP address in the header. The packages travel from router to router by numbers (sections) in that address. Nobody controls the way it happens but each router knows the router it should forward a package by parts of the IP number contained in the header of the package. That's why it is said "nobody owns the internet".

From now on is easy to understand. IANA only gives addresses by request and for a fee (it's called registering a domain, "blabla.com", not to be confounded with internet access fee to your provider, which allows you to get on the internet, light or dark), but there are many unassigned addresses due to especially the fact that IP standard changed recently. How many unassigned addresses? A lot. See here.

There are lots of entities which chose to use those and those are the dark web. Neither IANA nor big providers or owners of big internet routers don't block those. Google don't index them thus they are unsearchable but you can hard-code IP addresses in links in your page  if you are interested directly or bypassing (need for) DNS resolve.

Apparently they are up for grabs. And they became a big business to some. Don't ask me why IANA, providers, big router owners don't do nothing about. They could be filtered out and made unavailable with much ease though i don't know if existing routers are designed to filter out addresses.

In other words why there is a need to pay a fee to IANA to register a domain and why providers lets you access unregistered IP addresses. It's like paying a fee to take a bath in the ocean or something. Done that.

https://www.google.com/search?q=could+providers+filter+out+dark+web