Delivery-Date: Fri, 05 Feb 2016 03:41:33 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id B3C4C1E0DE8;
	Fri,  5 Feb 2016 03:41:31 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id E082139465;
	Fri,  5 Feb 2016 08:41:22 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id D050939328
 for <tor-talk@lists.torproject.org>; Fri,  5 Feb 2016 08:41:18 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id WWMb-_jnioHg for <tor-talk@lists.torproject.org>;
 Fri,  5 Feb 2016 08:41:18 +0000 (UTC)
Received: from mail-wm0-x229.google.com (mail-wm0-x229.google.com
 [IPv6:2a00:1450:400c:c09::229])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 83B5A38FE0
 for <tor-talk@lists.torproject.org>; Fri,  5 Feb 2016 08:41:18 +0000 (UTC)
Received: by mail-wm0-x229.google.com with SMTP id p63so16612331wmp.1
 for <tor-talk@lists.torproject.org>; Fri, 05 Feb 2016 00:41:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=ahmia-fi.20150623.gappssmtp.com; s=20150623;
 h=mime-version:in-reply-to:references:date:message-id:subject:from:to
 :content-type; bh=bH1eXx47t1Zb/t+8WBjJ0Tc74ELqKEDgCb3IIzTvOw4=;
 b=v0DlqfVJ35ItUE+pCcYHA2DlVzBBldn9M5LmXKeeh5a3FdAmhkgPk/T7CBy1AlPg8i
 w2u+zNzCTmfvSj8VDlZEMNA2DTjSAJnvfOW2886SdxMJmE3/SGG4AxFUj2ymAdIR4wwf
 2N73E/Qr3JrKYRffuJpFV9GIyjbdtkRZaOVt4kx+uRSYFe+eCWRFvWpkI4hI2xmgeCBy
 E4gfLkDmEd4HeutJK25iftWD6U/EUrXTdBtKYm9qGd1uxy/PzNOHStZPUIdKrsoVqoTm
 b70Kp6fP3fStSM8KCgBf+vkSvEF576UxJ2tQwk0mbLzfbGdnxlDK+st1YK9eWl3yw2OT
 cWCg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:in-reply-to:references:date
 :message-id:subject:from:to:content-type;
 bh=bH1eXx47t1Zb/t+8WBjJ0Tc74ELqKEDgCb3IIzTvOw4=;
 b=ZmRbvsoyTyOmaVA+J78nPOqgAn8eZu+9+mOxfR5APF2ihqHCmEtj91Netw7KiB02v5
 a3RYL5KdAa6deCkU9XL31OUfIm7oYBTJ0vWTOcEAcUZOAk0fnyhTsjsbJoUM6vM+x4E5
 Iwbxwm4Oe88r949caQvMoKwJLMvLOiha9m4XPjLvR7+gNkTbc3/4bEI8Im5TtrtY2PG8
 BBAYRd3TtYe0N+Y1WCPjY/Tybk0lG6Gs27j8r6T/Z8jV/d8UcwlbGPHw9uWDJYOrjz/S
 /DguKMu8i9B6HBboMtJg30UPBIQxae/n6nqtifwswZYDb2Bp0aJZpOaH5Z1pKZ3NsHtd
 epIg==
X-Gm-Message-State: AG10YOQC1oMBYlivsmio1GE3T2FYrprkB9ol4idCCFHSSILBKUwFTjDAw3/v4puWsvmJPwefhWqs92VQmasDVw==
MIME-Version: 1.0
X-Received: by 10.28.125.77 with SMTP id y74mr33795421wmc.21.1454661675707;
 Fri, 05 Feb 2016 00:41:15 -0800 (PST)
Received: by 10.28.90.11 with HTTP; Fri, 5 Feb 2016 00:41:15 -0800 (PST)
X-Originating-IP: [85.76.80.208]
In-Reply-To: <56A85C39.6080502@ahmia.fi>
References: <K8zVpUe--3-0@tutanota.com>
	<56A85C39.6080502@ahmia.fi>
Date: Fri, 5 Feb 2016 10:41:15 +0200
Message-ID: <CAJ8LpWrqNwAEWoyivpLtAzF344+X5Pd+_T1C4cWwD9EQYBa44w@mail.gmail.com>
From: "Nurmi, Juha" <juha.nurmi@ahmia.fi>
To: Tor Talk <tor-talk@lists.torproject.org>
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] Warning: 37 new booby trapped onion sites
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

I found over 200 more fake onions and filtered them. I don't like that
someone sabotages the onion ecosystem.

-Juha


On Wed, Jan 27, 2016 at 7:57 AM, Juha Nurmi <juha.nurmi@ahmia.fi> wrote:

> Hi,
>
> > If somebody hosts a dark website, that doesn't have a verifiable
> external way
> > to lookup their URL, then the only way you can verify them is to talk
> with a
> > bunch of other people, web-of-trust style. Which also has a bunch of
> ways it
> > can be undermined.
> >
>
> That's true. You have to trust the source(s) of the URL.
>
> > In any event, Juha, in your list, how do you know which ones are real and
> > fake?
> >
>
> I compared my real ahmia (msydqstlz2kzerdg.onion) to the fake one. I
> scanned them and detected the difference. The fake ahmia changes URLs to
> point to fake services.
>
> BTW, the attacker removed the fake version of Ahmia! It seems that the
> attacker didn't like my active countermeasures.
>
> Peace,
> Juha
>
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

