-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 10/31/2014 12:58 PM, rysiek wrote:
Hi all,
so, you've probably seen this: http://venturebeat.com/2014/10/31/facebook-announced-it-is-now-providing-dir...
Apart from being torn about the move (good on Facebook to support TOR, but I don't really feel like praising Facebook for anything I guess), there are two WTFs here: https://facebookcorewwwi.onion/
1. HTTPS to TOR Hidden Service? Why? /that's the smaller one/
2. How did they get to control 15 characters (I assume the "i" was random) in the .onion address? That's a *LOT* of number crunching. If they are able to do this, it means they are able (or are very close to) bascially spoof *any* .onion address.
Am I missing something?
We're talking about it the entire morning. Nice news for a halloween. You got two great points. First of all I think they didn't catch the main point of TOR network. Otherwise, who's certifying SSL key? About second question, or they made a commercial agreement with people in TOR OR they are able to spoof any .onion address. My guess is for second one. Why in hell somebody in TOR network will access facecrap? If TOR intent to give anonymous networking, why to use a service where you get anything but be anonymous? Do this make sense? In other hands, this is Chewbacca... - -- echo 920680245503158263821824753325972325831728150312428342077412537729420364909318736253880971145983128276953696631956862757408858710644955909208239222408534030331747172248238293509539472164571738870818862971439246497991147436431430964603600458631758354381402352368220521740203494788796697543569807851284795072334480481413675418412856581412376640379241258356436205061541557366641602992820546646995466P | dc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJUU64lAAoJEG7IGPwrPKWrj0MIAIz3Cd+4Hy9vyMGh/NdbjOm2 YDh8d3VtzbBjVEBAu2ZmmPAnpbQ8JFR5Xr/Kv3w1czQ6cqXSO4V88FElLuJ+bG+/ iAEx8ElIfQF78g9Hh1RyR+nsHMpMudNMQZCFkjfK69pJllAXHW4qHFHP336yHpli Bpg8sg4EMfXxjnlJUoh/AA/6qw7GGOI+1qeFPBvFjHqxbvoi2doy0Jy2CsMi/D6A XYm3ntusWCQkvp/bYMJQ9trBTCXEGAVsKuPEE/35dWIb06Lp9CL1RVK1IAPF7Sdi wvxWcYzS/uWP44eF+5s3SRvhKKC0bv45h7xw9n0X8utvOPvJrDE+mngvKVgYelE= =oifW -----END PGP SIGNATURE-----