This is an automated archive.

The original was posted on /r/tor by /u/miellliiionnj on 2023-08-13 18:46:28+00:00.


How do you feel about this idea:

Create a fake website (e.g. a forum) without HTTPS. Then create several accounts on this site through Tor. Then log in and out of these accounts frequently for a few days (again through Tor). Then leave those accounts and just wait.

If after some time one of these accounts is logged into, it means that the owners of the exit nodes were peeking and saving passwords! After all, the site is HTTPS-free, and outside of Tor they are transmitted in the open.