Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The New York Times Is Now Available as a Tor Onion Service

open.nytimes.com

Post reply on HN
Print view View original

61–70 of 205 posts

Re: The New York Times Is Now Available as a Tor Onion Service

#61

Post by jerheinze »

gressquel wrote: post #21
Bishonen88 wrote: post #2

So is it now "guaranteed", that TOR is secure? And how many "guarantees" does one need in order to be "guaranteed" security whilst browsing? [...]and they provide additional guarantees that readers are connected securely to our website.[...]

Its not secure. "Everyone" knows that. Everytime a drug market is taken down or a pedophile ring is busted, the investigators from FBI always claim it was some dubious mistake from the admin whic lead to it. But we all know they have discovered a vulnurability in the TOR protocol but won't disclose it. Safe browsing guys //edit: if you want extra security. Launch TOR from a remote desktop. And I am not talking about…

> //edit: if you want extra security. Launch TOR from a remote desktop. And I am not talking about the ones you buy from known VPN providers like NordicVPN or amazon web services.

No, if you want extra security use Qubes OS with Whonix (it comes with it by default) for isolating the Tor process in a single VM and the browser in another - thereby prohibiting any leaks, unless an adversary has a VM escape RCE.

Re: The New York Times Is Now Available as a Tor Onion Service

#63

Post by Illniyar »

detaro wrote: post #57
Illniyar wrote: post #55

Err... does the tor site still have the 10 views a month for free limit? Are tor users supposed to subscribe to NYT - that will surely blow through any privacy you hope to achieve.

See this subthread https://news.ycombinator.com/item?id=15567778

Thanks

Re: The New York Times Is Now Available as a Tor Onion Service

#64

Post by athenot »

belorn wrote: post #22
Izmaki wrote: post #11

Earlier quoted context omitted.

What does this mean in regular human terms?

Extended Validation certificate is when a company go to a CA and provide a bunch of business documents and legal proof that they really own the company behind a name. Its not a technical aspect but human lawyer human lawyer that establish a certificate. At the end if the validation is successful, the company get a technical signed document that in browsers shows up as a green lock and the name in green next to the UR…

> "a bunch of business documents and legal proof"

In my case they just needed me to put an entry in the Yellow Pages...

Re: The New York Times Is Now Available as a Tor Onion Service

#65

Post by Ajedi32 »

zamber wrote: post #50
Ajedi32 wrote: post #46

Is there a search engine or other convenient discovery mechanism for Onion services? I know DuckDuckGo has their own hidden service, but it seems that site only returns results from the regular internet, not from other hidden services.

> hidden services I think you responded to your own question. Besides that there are lists of onion services. Apparently there are also search services like https://ahmia.fi/

It's the real IP address of the service that's hidden, not necessarily its Onion address. In theory, there's no reason `.onion` links couldn't be crawled and indexed by search engines the same way any other website is.

Re: The New York Times Is Now Available as a Tor Onion Service

#68

Post by mattdotc »

spodek wrote: post #56

Does anyone know why they posted this story through Medium?

TimesOpen is an engineer-driven blog. Its previous incarnation was self-hosted on a WordPress stack (separate from our main CMS), but for various reasons it was decided to re-platform.

There were many discussions before settling on Medium and alternatives were considered (such as dogfooding our own CMS). We have a lot of work in-flight to modernize and simplify our publishing stack, and the timing wasn't right to rely on internal tools to publish a new blog.

Re: The New York Times Is Now Available as a Tor Onion Service

#69

Post by pvdebbe »

socceroos wrote: post #16
Bishonen88 wrote: post #2

So is it now "guaranteed", that TOR is secure? And how many "guarantees" does one need in order to be "guaranteed" security whilst browsing? [...]and they provide additional guarantees that readers are connected securely to our website.[...]

Disable Javascript. Enabling it makes you traceable. Run a Temporary profile in Firefox - otherwise cached images will make you traceable. Connect from your neighbors wifi (the further from your home the better, really) with a spoofed MAC address running from a write-locked USB live distro - this ensures you're protected from the unknown unknowns.

Then again, with JS disabled your browser fingerprint gets a lot more specific unless your UA is a scrawler bot.

Re: The New York Times Is Now Available as a Tor Onion Service

#70

Post by jonas21 »

spyspy wrote: post #39
ape4 wrote: post #27

The url is a bit hard to remember. https://www.nytimes3xbfgragh.onion/ Is there a directory of .onion sites? (with an easy .onion url)

I recall that Facebook brute forced their way into having an onion url that was easy to remember, by generating millions of them and then picking one that was simple.

That's clearly what the New York Times did as well (though probably with far less compute time than Facebook). nytimes3xbfgragh.onion is the easy to remember name they were able to generate.
Post reply on HN