41–50 of 205 posts
The url is a bit hard to remember. https://www.nytimes3xbfgragh.onion/ Is there a directory of .onion sites? (with an easy .onion url)
There are no “easy” onion URLs. They are essentially random (hash of a key iirc). It’s possible to generate random URLs until you get a prefix you like, but the time it takes increases exponentially with length of the desired prefix.
The url is a bit hard to remember. https://www.nytimes3xbfgragh.onion/ Is there a directory of .onion sites? (with an easy .onion url)
There are no “easy” onion URLs. They are essentially random (hash of a key iirc). It’s possible to generate random URLs until you get a prefix you like, but the time it takes increases exponentially with length of the desired prefix.
Ah, so disagreement with an administration is what will make everyone eventually to TOR Nothing to hide except when the wrong guy gets in power then you feel naked
And if yes, does their adoption of https in 2014[0]\ then imply that they were equally suspicious of the previous administration?
[0]: https://open.blogs.nytimes.com/2014/11/13/embracing-https/
If so, they're leaving their users-who-want-to-stay-relatively-anonymous open to attack via the advertisement vector. Members of that group would be considered high-value targets simply due to their anonymity desires.
I can't see the number of daily users being large enough that they'd lose significant profit by closing that attack vector. Hell, if there was a way to pay NYT enough to disable ads on all their services, I'd do it.
And they're using an Extended Validation certificate from DigiCert for it CN = nytimes3xbfgragh.onion OU = Technology O = The New York Times Company Object Identifier (2 5 4 15) = Private Organization along with some other addresses DNS Name: nytimes3xbfgragh.onion DNS Name: graylady3jvrrxbe.onion DNS Name: *.graylady3jvrrxbe.onion DNS Name: *.dev.graylady3jvrrxbe.onion DNS Name: *.stg.graylady3jvrrxbe.onion DNS Name…
EV is mandatory for .onion HTTPS certificates - since onion hashes (the 'domain name') are even less meaningful as a form of identity than regular domains. There's a couple of other differences with .onion certs too: https://certsimple.com/help/tor-support
I know DuckDuckGo has their own hidden service, but it seems that site only returns results from the regular internet, not from other hidden services.
This may not be the whole solution but it is a step in the right direction. Kudos to NYT for attention to this subset of readers.
It is. Overlay networks has a very expensive overhead, but it is one of the few ways that networks can be updated to modern views on security threats and privacy without getting ISP to change their hardware and software. I am in particular hopeful that we might see a future where tor will simply be a available tool in the general network stack, enabling private end-to-end without exist nodes.
Single onion services are a thing now for quiet some time actually: https://web.archive.org/web/20161219230314/https://blog.torp... (had to use archive.org since images are broken on their blog currently)
Does the onion service still serve the same advertisements their website and mobile app do? If so, they're leaving their users-who-want-to-stay-relatively-anonymous open to attack via the advertisement vector. Members of that group would be considered high-value targets simply due to their anonymity desires. I can't see the number of daily users being large enough that they'd lose significant profit by closing that a…
Ah, so disagreement with an administration is what will make everyone eventually to TOR Nothing to hide except when the wrong guy gets in power then you feel naked
Is there a search engine or other convenient discovery mechanism for Onion services? I know DuckDuckGo has their own hidden service, but it seems that site only returns results from the regular internet, not from other hidden services.
I think you responded to your own question.
Besides that there are lists of onion services. Apparently there are also search services like https://ahmia.fi/