23

For my masters degree in computer science, I'm currently working on a paper on ransomware. Goal of this paper is to focus on academic writing and citing sources correctly.

Trustworthiness/Quality of sources

As I wanted to show what kind of business ransomware is and what amounts of money are dealt with, I had a look at the TOR onion network - a deep web only accessible by TOR browser.

I found some interesting results. Despite the fact that the pages are completely anonymous and it's not sure if the authors can be trusted, would it be ok to cite those pages on ransomware-related questions, stating their poor trustworthiness immediately after the citation?

BibTeX

Other questions came up on how to cite these pages. My bibtex file now looks like this (I replaced some parts by * for obvious reasons):

@misc{Darknet:****,
    title={**** - The Better & Cheapest FUD Ransomware + C&C on Darknet},
    howpublished={\url{http://****.onion}},
    note={Abgerufen am 12.03.2017}
}

My question here is how to state that the *.onion url only works in TOR browser? Or should I better include a screenshot in case the page gets shut down?

4
  • 4
    I would cite the .onion url like any url, and also cite TOR. I would also include the screenshot as an illustration, but not as a citation. Mar 12, 2017 at 1:15
  • 5
    I don't think it's necessary to state that *.onion URLs only work in the TOR browser. Anyone who knows what a *.onion URL signifies will be aware of that, and anyone who doesn't shouldn't really be poking around there anyway.
    – tonysdg
    Mar 12, 2017 at 1:49
  • 5
    I'd put the correct term "(Tor hidden service)" behind the address to clarify that it's not a regular URL and besides that proceed as with any ordinary link. Also note that "Tor" isn't all caps.
    – Arminius
    Mar 12, 2017 at 6:02
  • Wikipedia archives web references to screenshot/archive services in order to be able to refer to the content with a time stamp. Would it make here, too? I mean, additionally to the original URL. Nov 17, 2018 at 0:02

3 Answers 3

2

Ideally, in the most strict sense of the word we should cite only material reviewed by professionals who have no conflict of interest with the authors, and this material better be published in a reputable journal. That's how we try to ensure trustworthiness. However, Web content is mostly not reviewed, and we wish to cite it, since there is some useful data over there. But there is also a lot of junk in the Web, and the presence of the author's name or nickname John Doe sometimes adds nothing to the trustworthiness. (Even professional agencies like Reuters, AP, or TASS sometimes produce junk which later goes to the websites of newspapers.)

That's a hole in the publication process: reviewers do accept papers citing low-quality websites, and the Tor sites are not an exception; simply the author of such sites is unknown. In terms of trustworthiness, all the following signatures are completely equivalent:

  • [no signature]

  • nickname like Sally6pack

  • pseudonym like Fred E. Ricks

  • unknown person like Max Müller

  • very well-known person like Bill Gates but on an unknown third-party website.

Whether you use this hole (and if so, how) or not is your own, personal, ethical decision.

(If you care: my own, purely subjective take on it would be that stating the poor trustworthiness of a website immediately after/before the citation or in the bibliography is fine.)

As for bibtex, use the note field to provide any information of how to access the material. You might alternatively consider biber+biblatex and use @online. I would refer to a different website with a HOWTO regarding accessing .onion.

5

Is it OK to cite? Yes.

But... While I recognize that some valuable information can only be obtained from the dark side, it is unfair to air a source’s opinion when the source’s identity and motives are shielded from scrutiny.

So, describe the anonymous sources as clearly as you can. I totally agree with you: "stating their poor trustworthiness immediately after the citation". And note that not everybody knows that *.onion URLs only work in the Tor browser.

About the URL format, cite as any URL, as Anonymous Physicist recommends. I would also suggest you to create permanent records of the web page. Services like perma.cc might help you, it cannot resolve .onion domains, but you can upload your own archive. Another way can be find here.

2
  • 1
    How is the source's identity being unknown "unfair"? To me it seems that the source is unknown even to the author of the question, so author has no information advantage over the reader of the paper. But even if this was not so, what good is not citing the source going to do for the reader or for the quality of the paper?
    – RQM
    Apr 4, 2017 at 22:10
  • Perhaps "unfair" isn't the word. As I wrote, you can cite. Just be fair with the reader stating from where those ideas came from.
    – Klerisson
    Apr 5, 2017 at 13:08
5

In regards to your first question, it is absolutely fine to cite anonymously published content. This is just a special case of citing a primary source. Primary sources often suffer from issues from trustworthiness, bias, and verifiability and they are routinely cited.

Anytime primary sources are cited, it is the authors' responsibility to provide sufficient context for readers to effectively evaluate the source. You might do this by explaining that the authors are anonymous and you cannot verify the veracity of any of the claims. You might even point out that there is evidence that the claims might be false. As long as it is framed responsibly, you should be fine.

In terms of your second question, I don't think there is any style guide that will help. In these case, I would just focus on the fact the goal is to allow people to easily and unambiguously identify exactly the page that you are referring to. There are a few approaches that I think will accomplish this goal. Providing a .onion address with a note like "(Tor hidden service)" might be enough to help people identify how to access because they might then look on the web for how to access this.

That said, since the .onion URLs — like all URLs — are likely to disappear, I think a better idea would be to use a perma.cc archived link of a Tor2web proxied URL. Tor2web proxies do not protect the anonymity of readers and are, themselves, not entirely stable. That said, for the purposes of creating an archival copy of a citation, they will be entirely sufficient.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .