Delivery-Date: Wed, 27 Jan 2016 00:57:29 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id D07D31E3047;
	Wed, 27 Jan 2016 00:57:27 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 55D6538FE9;
	Wed, 27 Jan 2016 05:57:23 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 19AB638FC9
 for <tor-talk@lists.torproject.org>; Wed, 27 Jan 2016 05:57:19 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 90NH-rbh9FEn for <tor-talk@lists.torproject.org>;
 Wed, 27 Jan 2016 05:57:19 +0000 (UTC)
Received: from mail-qk0-x22c.google.com (mail-qk0-x22c.google.com
 [IPv6:2607:f8b0:400d:c09::22c])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id E899238E2D
 for <tor-talk@lists.torproject.org>; Wed, 27 Jan 2016 05:57:18 +0000 (UTC)
Received: by mail-qk0-x22c.google.com with SMTP id s5so73164602qkd.0
 for <tor-talk@lists.torproject.org>; Tue, 26 Jan 2016 21:57:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=ahmia-fi.20150623.gappssmtp.com; s=20150623;
 h=subject:to:references:from:message-id:date:user-agent:mime-version
 :in-reply-to:content-type:content-transfer-encoding;
 bh=gH7wjxzU7EvO4dZEPi46B/TzHXHbIjWWMtpgiydvVk0=;
 b=ReFsS5t4wn41QzUsqP07ENkLy4d9sf8XJoUQ0NvpZY7iXlrif1uu5HIxvaZctqilyf
 HtWgeXLmaeRuKbAJiYEWIee18FBcRXG9cDC+7WLtyHD2sIPOCjgz48URJXiDqKjPjUYx
 9cWouXCLLw9S+b3iVIyuU/eF1KGcOGXvMFdtYU/gshfOyJAU9o+TgmksiY7hfPTN7ITM
 VkTD8mi8fmQUWDSsN55PCw+LivJ3Eu/DfXRBweyPN9+BWUw3g4V2HSPtDH8XO8VcvDm4
 bN/3fky64oWZvpx8fgXSiN1zYvwso+gkkvM9DdbMsQbQ7VY53Xaf73gmybXdUecQaWUx
 9uew==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:subject:to:references:from:message-id:date
 :user-agent:mime-version:in-reply-to:content-type
 :content-transfer-encoding;
 bh=gH7wjxzU7EvO4dZEPi46B/TzHXHbIjWWMtpgiydvVk0=;
 b=akG06TkA/8G29bSlXuc46Uj+L7mmwJ6VYD+jdZTUuCIj4FpyjYs2BmdEJCHjru2iy9
 plIfNVW8TPlsg0JKkUINsMesHTi+DU/D+BgrX+gERsAZxdcESgyLxWgwcY/31wffr6cu
 7CDZBOcmLWitW+SViHbZid/JE7RHem0Dh8jAQVtvX8Ac2Wyj+5zKr35bvdrobgZOTyzA
 VEf/Ct4m72w9Y+AxwgifXLR2yTp5r/7kTt6JGajAndxi+mX6RNI1OO6SlmmQuDrACQFV
 valyVTpJmbXwPxFe5uDCak3wmrSY+d077shdqVMz85ZbDQEd2es5Zzbo5vUuvUvVldM9
 kSLw==
X-Gm-Message-State: AG10YOSFiTNpPfiJHkrvOMHHYJB2C4OBZ/gGUbwTJ6hgPLTjWEXW8deNHOEeLbDLFcDpVw==
X-Received: by 10.55.212.148 with SMTP id s20mr11026492qks.63.1453874236594;
 Tue, 26 Jan 2016 21:57:16 -0800 (PST)
Received: from [10.4.12.131] ([184.75.214.163])
 by smtp.googlemail.com with ESMTPSA id i136sm1749377qhc.42.2016.01.26.21.57.15
 for <tor-talk@lists.torproject.org>
 (version=TLSv1/SSLv3 cipher=OTHER);
 Tue, 26 Jan 2016 21:57:15 -0800 (PST)
To: Tor Talk <tor-talk@lists.torproject.org>
References: <K8zVpUe--3-0@tutanota.com>
From: Juha Nurmi <juha.nurmi@ahmia.fi>
X-Enigmail-Draft-Status: N0000
Message-ID: <56A85C39.6080502@ahmia.fi>
Date: Wed, 27 Jan 2016 07:57:13 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101
 Thunderbird/38.5.1
MIME-Version: 1.0
In-Reply-To: <K8zVpUe--3-0@tutanota.com>
Subject: Re: [tor-talk] Warning: 37 new booby trapped onion sites
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Hi,

> If somebody hosts a dark website, that doesn't have a verifiable external way 
> to lookup their URL, then the only way you can verify them is to talk with a 
> bunch of other people, web-of-trust style. Which also has a bunch of ways it 
> can be undermined.
> 

That's true. You have to trust the source(s) of the URL.

> In any event, Juha, in your list, how do you know which ones are real and 
> fake?
> 

I compared my real ahmia (msydqstlz2kzerdg.onion) to the fake one. I
scanned them and detected the difference. The fake ahmia changes URLs to
point to fake services.

BTW, the attacker removed the fake version of Ahmia! It seems that the
attacker didn't like my active countermeasures.

Peace,
Juha
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

