Yeah that's fine, only need the vendor names and past history. What's Recon?

What a great update to hear. It will be far easier to proove my previous feedback and reputation should they have it available, recon you siad, good to hear!

It is a service I am launching as a replacement for Grams with up to date listing search for all current markets and an archive of all vendor feedback etc, lots of other new tools too that weren't available on Grams. Well as I said, the official database export is only of usernames/pgp keys, no feedback or any other data with it. Let me know if that will be of any use for you. I won't be able to provide an export of all vendor data from my own backups just because it will take too much time right now because of the complex storage used for Recon. You can always scrape it once the site launches though.

Sure, check your inbox if you have time too. I'm working on a shop system which will allow vendors to create their own shops (pages). I see you charge a fee for development of shops, but hey, about time someone change that? :-)

Ah awesome, yes we need more services to support the community, good to hear! Let me know if you need any help and I can probably provide some sort of integration into Recon to list the vendor's shop URLs etc. I assume you wanted to use the backup for verification? If so, there will be a verification API where you can set minimum sales parameters etc so that may be of interest to you. Will catch up on my inbox later today! Also, the only reason there is a charge on my service is because 500 goes towards hosting of Dread servers, the remaining balance pays off the individual shop servers for up to 4 years. Custom design is an additional $1000 which goes to my designer :)

Yeah well, the goal is to allow the vendors to have their own pages but with a centralized 'marketplace' that collects statistics and lists other metric data. It'll also be a way for vendors to put their voice out there and have it heard. Plan is to make it kind of like Openbazaar, but security wise it'll be a challenge, but I guess it'll all fall into place eventually. Individual shop servers is kind of steep imo. I don't think a vendor shop would require their own server, at least it wouldn't make sense economy wise. There are better ways to spare on the economy and still keep it all intact and secure using a single server.

If they were all on one server that would mean if one server was compromized, all the shops are compromized at the same time. I could easily fuck up an update on the server which leaves a vuln, separation is best for this type of thing overall. Also if a shop is DDOS'd that would affect the rest of the shops too being on the same server, they'd all go down.

Compromising a server is quite difficult if the server administrator knows what he's doing. It's not much different from running a marketplace, once their server is compromised they shut down. Same thing here, creating a shop will be 'free' for starters so there isn't any hyper budget available to make a cluster with a server for each shop. That's why you have a test server before you push your updates. I'm looking at stopping the DDoS attacks by having the system check the URL every now and then, if down the shop will have several alternatives generated. Those URLs will also automatically be visible on the 'centralized' space, so users can easily and quickly find their favorite shop.

I didn't say it was easy, but could be possible. The server could be identified with the best security out there, it means nothing if it does happen through some unknown method. Which is why it is best in my use case to ensure there is separation, so these could run even if I was gone. And of course you use a test server, doesn't mean you'll always pick up on everything and you're underestimating the DDOS attacks massively, Dread is under attack right now and has been for the best part of 2 months.

It could. Well, separate is always going to be better, I guess we could probably make that as a paid service to have it setup on a separate machine. Run failsafe a few times to ensure you don't miss out on anything. But of course, there may be times something bad could happen, best you can do is ensure it doesn't. I'm not all that deep into DDoS preventions on darkweb to be honest, but since it's a hobby project I guess we'll have to live to learn, meaning we'll see what happens and if it isn't enough we'll find a solution.

Let me know if you ever experience an attack, I've put a good few weeks of work into resolving it as best as possible in my current infrastructure. I do need to horizontally scale soon however.

Sure, if you could simply navigate to the inbox in the right hand corner, and check my message there we could have a pint together over how purple darkweb has become. :-)

hi /u/HugBunter is this database publicly available? I've been creating an addon that will prevent people from being phished and communicating with compromised vendors. Just as a personal hobby more than anything but it could be quite useful to the community in the future. this database could save me a decent amount of work

I'll be sharing a few resources including this shortly, keep an eye out for the Recon announcement I guess :)

Excellent thank you. I had been searching if there were any grams databases when I saw this thread.

deleted.. clearnet link and arbitrary

Download an untrusted file and open it with a program that was actively being exploited by the NSA? No thanks.