Как ломали SilkRoad
Генератор капч выдавал их в открытый интернет.
http://freenet:fms/forumviewthread.htm?viewstate=79a6033b-c889-4f80-935d-170ea658baff&threadid=179&page=1&boardid=47
https://www.wired.com/2014/09/the-fbi-finally-says-how-it-legally-pinpointed-...
when they entered that IP address directly into a browser, the Silk Road’s CAPTCHA prompt appeared, the garbled-letter image designed to prevent spam bots from entering the site.
“This indicated that the Subject IP Address was the IP address of the SR Server,” writes Tarbell in his letter, “and that it was ‘leaking’ from the SR Server because the computer code underlying the login interface was not properly configured at the time to work on Tor.”
That discovery by the FBI, the prosecuting attorneys in Ulbricht’s case argue, means that no illegal spying techniques were needed to pinpoint the world’s largest anonymous bazaar for narcotics. In fact, they write, the evidence revealing its physical location was left in plain sight.