131–140 of 168 posts
Please explain it to me if I'm wrong, but doesn't logging into Facebook on Tor defeat the purpose of Tor?
Related: Please Facebook, let me peek over your walled garden. Taking a privacy-friendly stance, with the current Facebook, hurts my social life. I do not trust your company, and I think you are bound to act unethically in the future. But I do not ask you to become a trustworthy ethical company. Mess with the accounts of my friends all you want. I just want to be invited to the next BBQ. People have stopped using e-m…
They'll still get -some- data off you, but frankly it's a lot of the same data they would get even if you didn't have an account.
Related: Please Facebook, let me peek over your walled garden. Taking a privacy-friendly stance, with the current Facebook, hurts my social life. I do not trust your company, and I think you are bound to act unethically in the future. But I do not ask you to become a trustworthy ethical company. Mess with the accounts of my friends all you want. I just want to be invited to the next BBQ. People have stopped using e-m…
Facebook users can invite non-Facebook users by email to events, if they want to. But for viewing what your friends and parents are doing on Facebook? Well, they could change their privacy settings to be public, but that would hurt their privacy. You want to be in their social graph, but not have a Facebook account. What does that even mean? Do you just not want to have a password? There's no rule you have to post an…
This stops after a while. Even when you stay a pleasant person, you'll always be "that guy" requiring an extra action to contact. The social ripple/ping of an event stays inside Facebook.
> You want to be in their social graph, but not have a Facebook account.
In the ideal form this would be a totally open protocol (with backing of Facebook, Google, ... and W3C).
In the current form, I do not know enough about Facebook to suggest a good system. Yes. I want to be in their social graph, but not have a Facebook account or be under Facebook TOS. If that is meaningless at the moment, maybe we should make it mean something.
Related: Please Facebook, let me peek over your walled garden. Taking a privacy-friendly stance, with the current Facebook, hurts my social life. I do not trust your company, and I think you are bound to act unethically in the future. But I do not ask you to become a trustworthy ethical company. Mess with the accounts of my friends all you want. I just want to be invited to the next BBQ. People have stopped using e-m…
Related: Please Facebook, let me peek over your walled garden. Taking a privacy-friendly stance, with the current Facebook, hurts my social life. I do not trust your company, and I think you are bound to act unethically in the future. But I do not ask you to become a trustworthy ethical company. Mess with the accounts of my friends all you want. I just want to be invited to the next BBQ. People have stopped using e-m…
Earlier quoted context omitted.
That's really interesting. Are you able to tell us how long those 500k cores were running for before the facebookcorewwwi.onion name was found?
We generated many candidates beginning with facebook, so I don't recall when that one was found--it just happened to be the one that looked the best. There's a number of backup memorable domains that we kept the keypairs for just in case facebookcorewwwi gets compromised somehow. I don't remember how long we ran it for, but IIRC we had enough candidates to stop after a week or two. I'm guessing something like 100-200…
[1] https://en.wikipedia.org/wiki/List_of_most_expensive_domain_...
Related: Please Facebook, let me peek over your walled garden. Taking a privacy-friendly stance, with the current Facebook, hurts my social life. I do not trust your company, and I think you are bound to act unethically in the future. But I do not ask you to become a trustworthy ethical company. Mess with the accounts of my friends all you want. I just want to be invited to the next BBQ. People have stopped using e-m…
This is a social problem, not a technical problem. Encourage your social group to not use proprietary walled-gardens to plan and publicize their events. They'll all be better off for it.
You won't convince your social group to delete their Facebook account. You may, however, convince them that you are not cool.
I'll probably take the other advice, open a new account, use a week for invites, turn on email-updates, and bite the bullet.
Earlier quoted context omitted.
If you expect facebook to leak everything they know about you then connecting through tor allows them to know one less thing about you (the location you used to visit facebook).
Actually you share one more, important, datum: This user uses Tor. Likely uses Tor for other, possible nefarious, purposes too. Likely has a high X_keyscore. Your real profile and location can be inferred from your browsing habbits and friend's data. Unfortunately, with the current size of Facebook, even "not having an active Facebook account" shares data, especially when you are in an age category where all your pee…
Fuck them. Is this the line of thinking you want to align your live to?
We need to work together to stop that from happening. In the end the best fake profile win's and it's a competition in hiding your sins. Medieval ages called and complained that you used them to compare to this mess.
Every second/third? totally fine, everything perfect guy has some unhealthy addiction but the guy who uses Tor for playing around or ordering drugs is suspicious? It's laughable. You only get some collections of narcissists and psychopaths as employees that still do occasionally harm to your company and use drugs like everyone else.
What the fuck is going on. It's 2016 and I'm feeling like 1516.
Earlier quoted context omitted.
We generated many candidates beginning with facebook, so I don't recall when that one was found--it just happened to be the one that looked the best. There's a number of backup memorable domains that we kept the keypairs for just in case facebookcorewwwi gets compromised somehow. I don't remember how long we ran it for, but IIRC we had enough candidates to stop after a week or two. I'm guessing something like 100-200…
Thanks for sharing! I'm now curious to know what the energy bill came to and whether it would make it to the list of most expensive domain names[1]. [1] https://en.wikipedia.org/wiki/List_of_most_expensive_domain_...
Earlier quoted context omitted.
Also, if I'm not mistaken, this means that if YOU can brute force a vanity domain, anyone else willing to throw down the same amount of computing power can perform the same brute force and discover your private key, taking over your onion site? Edit: probably wrong, see below
Sure. The same is true for anything that uses public key encryption (Bitcoin for one). But the amount of computing power needed doesn't exist. According to this person's math [1]: "It would take ~6.7e40 times longer than the age of the universe to exhaust half of the keyspace of a AES-256 key" I don't know if Tor uses AES-256, but I'm sure any reasonable encryption algorithm would be similar. [1] https://www.reddit.c…
[1] https://news.ycombinator.com/item?id=11388997 [2] https://blog.cloudflare.com/the-trouble-with-tor/