-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 28/09/12 14:07, ahmia wrote:
> We are working on Tor related projects including running Tor exit > nodes and the first public Tor hidden service search engine > (http://ahmia.fi/). > > We would love to hear opinions and ideas about ahmia.fi search. > There are now few enthusiastic geeks using their own money and free > time to this project and everyone is welcome to join. Am I right in thinking that the way this search engine works is that the entire index is sent to the browser initially, and then the browser locally searches that index? If so, that's a pretty neat way of protecting peoples searches. Obviously, it wont scale, but you know that already. It feels like you're doing the search in the main thread as I type into the search field, as it's blocking the user interface a lot. I suggest you use javascript web workers for this purpose so you can background the searching task onto a new thread. Or just get rid of the whole "search as I type" thing. Gimmicks are fine, unless they actually make the user experience worse. Please provide https. At the moment, the search engine can be trivially MITM'd and script inserted to log searches. Also, please rethink your decision to let Google execute arbitrary code on your pages. - -- Mike Cardwell https://grepular.com/ http://cardwellit.com/ OpenPGP Key 35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F XMPP OTR Key 8924 B06A 7917 AAF3 DBB1 BF1B 295C 3C78 3EF1 46B4 -----BEGIN PGP SIGNATURE----- iQGGBAEBCgBwBQJQZad2MBSAAAAAACAAB3ByZWZlcnJlZC1lbWFpbC1lbmNvZGlu Z0BwZ3AuY29tcGdwbWltZTgUgAAAAAAVABpwa2EtYWRkcmVzc0BnbnVwZy5vcmdt aWtlLmNhcmR3ZWxsQGdyZXB1bGFyLmNvbQAKCRCdJiMBwdHnBJp2B/4orFtVDfl6 93sbRUGAEEvl1CY159ZeWpkHfCsR1GOS4kFBS459XbJcdoQcwDVBPgMaTURRjunX HoNiSET8LoIHUbgfkt/SR5n9y2597podkS+XVnW3jVSEXz8DVawWZGnrbzhLde9s d4UW7hgDLkbs8n9wMb8/xoTDNEYd8Dj95h8LBGjAA+RQxhG4JwCAZo5Q7F1t9lpr tTBW4fkYxaB2pqTX5mS8rmY/XuG8dWSPz0jGrzyamaLbK+/XFdGqRLNcbEBPNkTI O3etngNgDEJTu4eHTlrVbyu0dd2tNUhka6FTCujwNBDOuXGSQMaEEUQzWJyXRXnl z+pk9m5iNeWS =Wbff -----END PGP SIGNATURE----- _______________________________________________ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk