Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The New York Times Is Now Available as a Tor Onion Service

open.nytimes.com

Post reply on HN
Print view View original

21–30 of 205 posts

Re: The New York Times Is Now Available as a Tor Onion Service

#21

Post by gressquel »

Bishonen88 wrote: post #2

So is it now "guaranteed", that TOR is secure? And how many "guarantees" does one need in order to be "guaranteed" security whilst browsing? [...]and they provide additional guarantees that readers are connected securely to our website.[...]

Its not secure. "Everyone" knows that. Everytime a drug market is taken down or a pedophile ring is busted, the investigators from FBI always claim it was some dubious mistake from the admin whic lead to it. But we all know they have discovered a vulnurability in the TOR protocol but won't disclose it.

Safe browsing guys

//edit: if you want extra security. Launch TOR from a remote desktop. And I am not talking about the ones you buy from known VPN providers like NordicVPN or amazon web services.

Re: The New York Times Is Now Available as a Tor Onion Service

#22

Post by belorn »

Izmaki wrote: post #11
blfr wrote: post #10

And they're using an Extended Validation certificate from DigiCert for it CN = nytimes3xbfgragh.onion OU = Technology O = The New York Times Company Object Identifier (2 5 4 15) = Private Organization along with some other addresses DNS Name: nytimes3xbfgragh.onion DNS Name: graylady3jvrrxbe.onion DNS Name: *.graylady3jvrrxbe.onion DNS Name: *.dev.graylady3jvrrxbe.onion DNS Name: *.stg.graylady3jvrrxbe.onion DNS Name…

What does this mean in regular human terms?

Extended Validation certificate is when a company go to a CA and provide a bunch of business documents and legal proof that they really own the company behind a name. Its not a technical aspect but human lawyer human lawyer that establish a certificate. At the end if the validation is successful, the company get a technical signed document that in browsers shows up as a green lock and the name in green next to the URL.

Re: The New York Times Is Now Available as a Tor Onion Service

#23

Post by nottorp »

greiskul wrote: post #13
nottorp wrote: post #8

Hmm don't you have to pay to access the full newspaper? How does that mix with Tor anonymity?

Haven't tested to see how they are doing, but that's kinda orthogonal to using tor. Standard cryptography like https uses is meant so any eavesdroppers don't know WHAT you are talking about. But they still know that Alice is talking with Bob. Onion routing, that tor uses, is meant to so eavesdroppers also don't know who is talking to whom. But that's on the eavesdroppers part. If Alice and Bob are talking completely…

Ah right - i was thinking of hiding from the US government, which can get the identity of subscribers directly from NYT.

I forgot there are other governments too... shame, I'm not even from the US.

Re: The New York Times Is Now Available as a Tor Onion Service

#24

Post by typon »

gressquel wrote: post #21
Bishonen88 wrote: post #2

So is it now "guaranteed", that TOR is secure? And how many "guarantees" does one need in order to be "guaranteed" security whilst browsing? [...]and they provide additional guarantees that readers are connected securely to our website.[...]

Its not secure. "Everyone" knows that. Everytime a drug market is taken down or a pedophile ring is busted, the investigators from FBI always claim it was some dubious mistake from the admin whic lead to it. But we all know they have discovered a vulnurability in the TOR protocol but won't disclose it. Safe browsing guys //edit: if you want extra security. Launch TOR from a remote desktop. And I am not talking about…

> But we all know they have discovered a vulnurability in the TOR protocol but won't disclose it.

Can you provide evidence for this claim? I'm a huge conspiracy nut, this has me excited.

Re: The New York Times Is Now Available as a Tor Onion Service

#26

Post by jstanley »

Bishonen88 wrote: post #2

So is it now "guaranteed", that TOR is secure? And how many "guarantees" does one need in order to be "guaranteed" security whilst browsing? [...]and they provide additional guarantees that readers are connected securely to our website.[...]

Using Tor is more secure than not using Tor, no matter how much FUD people try to spread about it.

Re: The New York Times Is Now Available as a Tor Onion Service

#28

Post by staticassertion »

gressquel wrote: post #21
Bishonen88 wrote: post #2

So is it now "guaranteed", that TOR is secure? And how many "guarantees" does one need in order to be "guaranteed" security whilst browsing? [...]and they provide additional guarantees that readers are connected securely to our website.[...]

Its not secure. "Everyone" knows that. Everytime a drug market is taken down or a pedophile ring is busted, the investigators from FBI always claim it was some dubious mistake from the admin whic lead to it. But we all know they have discovered a vulnurability in the TOR protocol but won't disclose it. Safe browsing guys //edit: if you want extra security. Launch TOR from a remote desktop. And I am not talking about…

I guess I'm not everyone. I'd bet that the majority of the 'busts' are due to:

a) Infiltrating chats where people are more likely to share sensitive information / trust the people they're talking to

b) Poor configurations/ setups on either the client or server (client browser bundle has noscript, but it's not on the strictest settings, js is enabled iirc)

c) Exploitation of client or server due to out of date versions, things like that

Historically I think it's always fallen into one of these cases - and not just what the FBI etc say publicly but we've seen these exploits ITW. I wouldn't be surprised if the NSA and other agencies have the power to deanonymize TOR users but if it were trivial why is the majority of TOR traffic still going towards illegal content? Last I read (a paper a year ago) TOR is still primarily all about drugs, followed by child pornography (mostly drugs though iirc). If they can track all of these people by breaking TOR completely... why don't they?

Re: The New York Times Is Now Available as a Tor Onion Service

#29

Post by andimm »

Izmaki wrote: post #11
blfr wrote: post #10

And they're using an Extended Validation certificate from DigiCert for it CN = nytimes3xbfgragh.onion OU = Technology O = The New York Times Company Object Identifier (2 5 4 15) = Private Organization along with some other addresses DNS Name: nytimes3xbfgragh.onion DNS Name: graylady3jvrrxbe.onion DNS Name: *.graylady3jvrrxbe.onion DNS Name: *.dev.graylady3jvrrxbe.onion DNS Name: *.stg.graylady3jvrrxbe.onion DNS Name…

What does this mean in regular human terms?

I liked this post on EV certificates:

https://www.troyhunt.com/on-the-perceived-value-ev-certs-cas...

Re: The New York Times Is Now Available as a Tor Onion Service

#30

Post by colejohnson66 »

belorn wrote: post #22
Izmaki wrote: post #11

Earlier quoted context omitted.

What does this mean in regular human terms?

Extended Validation certificate is when a company go to a CA and provide a bunch of business documents and legal proof that they really own the company behind a name. Its not a technical aspect but human lawyer human lawyer that establish a certificate. At the end if the validation is successful, the company get a technical signed document that in browsers shows up as a green lock and the name in green next to the UR…

So in addition to knowing that your browser is connected to where you want, you now know that the website you want is actually who they say they are?
Post reply on HN