On Tue, Jun 30, 2015 at 5:59 AM, Roger Dingledine <a...@mit.edu> wrote:
> If somebody could investigate how the fake onion services differ from > the real ones, that would be neat. > I made a comparison and noticed that the attacker is replacing all the Bitcoin addresses. Obviously the attacker is replacing links with the fake links too. I don't see any other difference in any level than this: The transparent proxy is just slightly slower but hard to detect from the real service and the HTTP server headers looks fine. -Juha -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk