On 3/3/16, lukep wrote:
> Hi - the question as to which is the "real" onion address and which is the
> "fake" one is a matter of interpretation. Normally there's a "real" onion
> first and then some copy-cats later - then you can compare the copy-cats to
> the original and decide that they are fak
Juha Nurmi ahmia.fi> writes:
> First way I did this was pretty simple: I compared my real ahmia
> (msydqstlz2kzerdg.onion) to the fake one. I scanned them and detected
> the difference. The fake ahmia changes URLs to point to fake services.
>
> Now I have several clever methods to detect fake w
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Hi,
> Is there anyway to somehow automate the process? (The developer in
> me coming out)
>
Absolutely.
> I ask because this seems like something that you will be doing
> perpetually. Something like an algorithm that can compare
> percentage matc
Is there anyway to somehow automate the process? (The developer in me coming
out)
I ask because this seems like something that you will be doing perpetually.
Something like an algorithm that can compare percentage match of heuristics of
a database of previous sites marked as fake against all ne
> From: juha.nu...@ahmia.fi
> I found over 200 more fake onions and filtered them. I don't like that
> someone sabotages the onion ecosystem.
>
> -Juha
Good on you for doing that
--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://list
I found over 200 more fake onions and filtered them. I don't like that
someone sabotages the onion ecosystem.
-Juha
On Wed, Jan 27, 2016 at 7:57 AM, Juha Nurmi wrote:
> Hi,
>
> > If somebody hosts a dark website, that doesn't have a verifiable
> external way
> > to lookup their URL, then the o
Hi,
> If somebody hosts a dark website, that doesn't have a verifiable external way
> to lookup their URL, then the only way you can verify them is to talk with a
> bunch of other people, web-of-trust style. Which also has a bunch of ways it
> can be undermined.
>
That's true. You have to tru
Juha, thank you for identifying the real and fake sites.
This re-raises the question, when you get a URL from somewhere, how do you
know it's the real one? Which upon further thought requires definition of
"the real one." If two guys on the internet both claim to be John Doe, how is
it possible
Thank you very much for being so vigilant and proactive.
--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Hello Tor community,
In June I warned Tor users about the presence of hundreds of fake and booby
trapped .onion websites [1].
Someone runs a fake site on a similar address to the original one and tries
to fool people with that. The sites look like the original ones.
These sites are actually work
10 matches
Mail list logo
