Comical attempt to give Street cred to the NYT.
The New York Times Is Now Available as a Tor Onion Service
91–100 of 205 posts
Re: The New York Times Is Now Available as a Tor Onion Service
#92And they're using an Extended Validation certificate from DigiCert for it CN = nytimes3xbfgragh.onion OU = Technology O = The New York Times Company Object Identifier (2 5 4 15) = Private Organization along with some other addresses DNS Name: nytimes3xbfgragh.onion DNS Name: graylady3jvrrxbe.onion DNS Name: *.graylady3jvrrxbe.onion DNS Name: *.dev.graylady3jvrrxbe.onion DNS Name: *.stg.graylady3jvrrxbe.onion DNS Name…
Re: The New York Times Is Now Available as a Tor Onion Service
#93Earlier quoted context omitted.
Yes, but how do you know that you are actually connected to nytimes3xpfgragh.onion each time? DV lets you know that the onion site you connected to is the NYTimes, and not a privacy-attacking MITM site. Did you notice that I changed the nytimes URL a tiny bit up there? nytimes3xbfgragh.onion is the real one. (Yes, there's no guarantee that someone else would be able to generate a specific alternate address, but one t…
DV lets you know that you're connecting to the domain that you're connecting to. You already know that with all onion addresses. EV lets you assure that you are connected to the New York Times.
I believe the original post meant "meaningful as form of identity" to human brains, not technical identity.
Re: The New York Times Is Now Available as a Tor Onion Service
#94And they're using an Extended Validation certificate from DigiCert for it CN = nytimes3xbfgragh.onion OU = Technology O = The New York Times Company Object Identifier (2 5 4 15) = Private Organization along with some other addresses DNS Name: nytimes3xbfgragh.onion DNS Name: graylady3jvrrxbe.onion DNS Name: *.graylady3jvrrxbe.onion DNS Name: *.dev.graylady3jvrrxbe.onion DNS Name: *.stg.graylady3jvrrxbe.onion DNS Name…
https://crt.sh/?id=240277340
Any idea why it was revoked?
Re: The New York Times Is Now Available as a Tor Onion Service
#95Earlier quoted context omitted.
Yes, but how do you know that you are actually connected to nytimes3xpfgragh.onion each time? DV lets you know that the onion site you connected to is the NYTimes, and not a privacy-attacking MITM site. Did you notice that I changed the nytimes URL a tiny bit up there? nytimes3xbfgragh.onion is the real one. (Yes, there's no guarantee that someone else would be able to generate a specific alternate address, but one t…
DV lets you know that you're connecting to the domain that you're connecting to. You already know that with all onion addresses. EV lets you assure that you are connected to the New York Times.
I'm trying to understand onion/tor better, what about Onion addresses specifically make them I guess invulnerable to man in the middle attacks?
Re: The New York Times Is Now Available as a Tor Onion Service
#96The NYT is so pro-establishment it is probably the last site on Earth that would have its domain taken away from them.
Re: The New York Times Is Now Available as a Tor Onion Service
#97Earlier quoted context omitted.
DV lets you know that you're connecting to the domain that you're connecting to. You already know that with all onion addresses. EV lets you assure that you are connected to the New York Times.
I'm trying to understand onion/tor better, what about Onion addresses specifically make them I guess invulnerable to man in the middle attacks?
The public key is encoded in the onion address, so the client can verify the server you connect to has the matching private key. This is part of the tor protocol, so happens always when talking to onion services.
Re: The New York Times Is Now Available as a Tor Onion Service
#98Earlier quoted context omitted.
Hey, Tom. I'll be right over with my laptop that I don't care about. You still on Green St.?
Nope, I got promoted to Wall St., 5th floor! Just leave it unattended in the Blue Room, by the donuts, and I'll pick it up in a few.
Is this conversation real? I don't know what's real anymore!
Re: The New York Times Is Now Available as a Tor Onion Service
#99Earlier quoted context omitted.
Extended Validation certificate is when a company go to a CA and provide a bunch of business documents and legal proof that they really own the company behind a name. Its not a technical aspect but human lawyer human lawyer that establish a certificate. At the end if the validation is successful, the company get a technical signed document that in browsers shows up as a green lock and the name in green next to the UR…
> "a bunch of business documents and legal proof" In my case they just needed me to put an entry in the Yellow Pages...
Don't forget to restart your ypserver!
Also, never put this line in /etc/netgroup then rwall to it:
universal (,,)
http://www-mice.cs.ucl.ac.uk/multimedia/misc/tcp_ip/8702.mm....
Re: The New York Times Is Now Available as a Tor Onion Service
#100Earlier quoted context omitted.
I am curious about this as well. Tor is anonymous insofar as individual entrances and exits cannot be monitored. The advertising and other tracking pixels that would riddle something like the NYT site makes me think this is how some uncareful kingpin will fall, checking the op-eds.
Can't the nodes be compromised? I've eschewed using it as USG is purported to have taken over entrance and exit nodes using a combination of threats and bribery.
In order to fully compromise your privacy, the government would need to have control of _all nodes_ in your path, not just the entrance and exit nodes. (They _might_ be able to deanonymize some users by using traffic correlation using only entrance and exit nodes, but that is by no means a straightforward process.)
Tor also gives you a way to choose a specific exit node based on the country it is in, but I have no idea how reliable that is.
It is worth noting that with hidden services no exit nodes are required, since your traffic's final destination is running its own Tor-compatible node.