Live data from Hacker News

The New York Times Is Now Available as a Tor Onion Service

open.nytimes.com

111–120 of 205 posts

Re: The New York Times Is Now Available as a Tor Onion Service

#111
post #98

Earlier quoted context omitted.

Nope, I got promoted to Wall St., 5th floor! Just leave it unattended in the Blue Room, by the donuts, and I'll pick it up in a few.

Is this conversation real? I don't know what's real anymore!

%6EY YcfI Yu0` *lAS B4k< GonA 9ZZ+ 02(#

Re: The New York Times Is Now Available as a Tor Onion Service

#112

Does the onion service still serve the same advertisements their website and mobile app do? If so, they're leaving their users-who-want-to-stay-relatively-anonymous open to attack via the advertisement vector. Members of that group would be considered high-value targets simply due to their anonymity desires. I can't see the number of daily users being large enough that they'd lose significant profit by closing that a…

curl -H ""

There are zero good web browsers with socks5 support. (which is needed for tor)

Re: The New York Times Is Now Available as a Tor Onion Service

#113

Earlier quoted context omitted.

Trump would disagree.

I don't think he would disagree they are pro-establishment. He'd love them to be taken down though there is no way he could make this happen.

I think it's more that he'd prefer that the media didn't cite "unverified" dossiers that they sourced from Buzzfeed [0], which were produced by a source with ties to the DNC [1][2].

[0]: https://www.nytimes.com/2017/01/23/opinion/why-buzzfeed-news...

[1]: https://www.nytimes.com/2017/01/11/us/politics/donald-trump-...

[2]: http://www.washingtontimes.com/news/2017/oct/24/dnc-clinton-...

Re: The New York Times Is Now Available as a Tor Onion Service

#115
post #10

And they're using an Extended Validation certificate from DigiCert for it CN = nytimes3xbfgragh.onion OU = Technology O = The New York Times Company Object Identifier (2 5 4 15) = Private Organization along with some other addresses DNS Name: nytimes3xbfgragh.onion DNS Name: graylady3jvrrxbe.onion DNS Name: *.graylady3jvrrxbe.onion DNS Name: *.dev.graylady3jvrrxbe.onion DNS Name: *.stg.graylady3jvrrxbe.onion DNS Name…

Sometimes I wonder if it's a good idea to brute-force these kinds of "vanity" onion prefixes. Take a look at the addresses used in http://incoherency.co.uk/blog/stories/hidden-service-phishin... ; they brute-forced the same prefix with a different suffix. Would anyone really notice?

Re: The New York Times Is Now Available as a Tor Onion Service

#116
post #79

Earlier quoted context omitted.

I am curious about this as well. Tor is anonymous insofar as individual entrances and exits cannot be monitored. The advertising and other tracking pixels that would riddle something like the NYT site makes me think this is how some uncareful kingpin will fall, checking the op-eds.

Can't the nodes be compromised? I've eschewed using it as USG is purported to have taken over entrance and exit nodes using a combination of threats and bribery.

as Ajedi32 states, even knowing entrances and exits, it is SUPRHARD to figure out all the associations, but it has been done in the past for high profile sites. It is also not possible for them to monitor every entrance and exit, and it is akin to watching the entrances to a mall where everyone is dressed exactly the same, trying to identify who shops where. With one-off data, really hard. With regular or periodic data, the mystery is a lot easier to unravel.

Re: The New York Times Is Now Available as a Tor Onion Service

#117
post #22

Earlier quoted context omitted.

Extended Validation certificate is when a company go to a CA and provide a bunch of business documents and legal proof that they really own the company behind a name. Its not a technical aspect but human lawyer human lawyer that establish a certificate. At the end if the validation is successful, the company get a technical signed document that in browsers shows up as a green lock and the name in green next to the UR…

So in addition to knowing that your browser is connected to where you want, you now know that the website you want is actually who they say they are?

> you now know that the website you want is actually who they say they are?

That's the idea. Of course, validation, while more thorough than for standard certs, still is not that reliable. My strong impression is that it could be fooled by anyone sufficiently motivated.

Re: The New York Times Is Now Available as a Tor Onion Service

#118
post #50
post #46

Is there a search engine or other convenient discovery mechanism for Onion services? I know DuckDuckGo has their own hidden service, but it seems that site only returns results from the regular internet, not from other hidden services.

> hidden services I think you responded to your own question. Besides that there are lists of onion services. Apparently there are also search services like https://ahmia.fi/

Although there's a risk to using onion directories, since you have to trust that the hash they give you for the New York Times for example, is actually the real hash. It's easier to spoof onion hashes than domain names since domain names are more well known. You'd hopefully catch that you're connecting to nytim3s.com, not so much nytimes3xbfgra3h.onion.

Re: The New York Times Is Now Available as a Tor Onion Service

#120
post #104
post #91

Comical attempt to give Street cred to the NYT.

Comical how? Check out their tech blog[0]. I'd venture a guess that they are the most technically adventurous news site, if not one of the more open corporations around in regards to trying new technology and writing about the experience. A lot of what they have to say is pretty interesting. [0] - https://open.nytimes.com/

I agree. NYTimes has led with technical prowess the past a few years.
Post reply on HN