121–130 of 205 posts
Will this help people in China at all? From an article I ready a while back it seemed like Tor has been defeated there. ( https://www.technologyreview.com/s/427413/how-china-blocks-t... )
https://blog.torproject.org/breaking-through-censorship-barr...
Earlier quoted context omitted.
Tor Browser isolates cookies and other browser state into buckets based on URL bar domains.
... i.e. first party isolation, one can read more about it on the Tor Browser design document: https://www.torproject.org/projects/torbrowser/design/
Earlier quoted context omitted.
What does this mean in regular human terms?
Extended Validation certificate is when a company go to a CA and provide a bunch of business documents and legal proof that they really own the company behind a name. Its not a technical aspect but human lawyer human lawyer that establish a certificate. At the end if the validation is successful, the company get a technical signed document that in browsers shows up as a green lock and the name in green next to the UR…
Earlier quoted context omitted.
> "a bunch of business documents and legal proof" In my case they just needed me to put an entry in the Yellow Pages...
Errata: sorry I went back and checked and I believe they also required some proof of incorporation. My apologies for the incorrect cynicism. :(
And they're using an Extended Validation certificate from DigiCert for it CN = nytimes3xbfgragh.onion OU = Technology O = The New York Times Company Object Identifier (2 5 4 15) = Private Organization along with some other addresses DNS Name: nytimes3xbfgragh.onion DNS Name: graylady3jvrrxbe.onion DNS Name: *.graylady3jvrrxbe.onion DNS Name: *.dev.graylady3jvrrxbe.onion DNS Name: *.stg.graylady3jvrrxbe.onion DNS Name…
Sometimes I wonder if it's a good idea to brute-force these kinds of "vanity" onion prefixes. Take a look at the addresses used in http://incoherency.co.uk/blog/stories/hidden-service-phishin... ; they brute-forced the same prefix with a different suffix. Would anyone really notice?
Earlier quoted context omitted.
> hidden services I think you responded to your own question. Besides that there are lists of onion services. Apparently there are also search services like https://ahmia.fi/
Although there's a risk to using onion directories, since you have to trust that the hash they give you for the New York Times for example, is actually the real hash. It's easier to spoof onion hashes than domain names since domain names are more well known. You'd hopefully catch that you're connecting to nytim3s.com, not so much nytimes3xbfgra3h.onion.
Earlier quoted context omitted.
... i.e. first party isolation, one can read more about it on the Tor Browser design document: https://www.torproject.org/projects/torbrowser/design/
How can I get first party isolation in regular chrome or firefox? That is exactly what I've been imagining/wanting since Firefox announced their new container prototype.
In this case the relevant preference is privacy.firstparty.isolate = true. Another worth pointing out pref is privacy.resistFingerprinting = true.
Will this help people in China at all? From an article I ready a while back it seemed like Tor has been defeated there. ( https://www.technologyreview.com/s/427413/how-china-blocks-t... )
[1] : https://trac.torproject.org/projects/tor/wiki/doc/meek
[2] : https://trac.torproject.org/projects/tor/wiki/doc/Snowflake
Earlier quoted context omitted.
I don't think he would disagree they are pro-establishment. He'd love them to be taken down though there is no way he could make this happen.
I think it's more that he'd prefer that the media didn't cite "unverified" dossiers that they sourced from Buzzfeed [0], which were produced by a source with ties to the DNC [1][2]. [0]: https://www.nytimes.com/2017/01/23/opinion/why-buzzfeed-news... [1]: https://www.nytimes.com/2017/01/11/us/politics/donald-trump-... [2]: http://www.washingtontimes.com/news/2017/oct/24/dnc-clinton-...
Earlier quoted context omitted.
I recall that Facebook brute forced their way into having an onion url that was easy to remember, by generating millions of them and then picking one that was simple.
That's clearly what the New York Times did as well (though probably with far less compute time than Facebook). nytimes3xbfgragh.onion is the easy to remember name they were able to generate.
Easy to remember.