News for hackers. Stuff that matters.
Re:1M People Use Facebook Over Tor by c22 on Friday April 22, 2016 @03:58PM (#11552166)
There's nowhere to register the key, tor is decentralized. They simply start conducting their business using the key they found. There's no waste of key space for the unused keys, merely a minuscule chance of collision with other random users. I guess you could think of attempting to find hash collisions as a race condition of sorts, but it is a very long race for the attacker.
Re:1M People Use Facebook Over Tor by cm3 on Friday April 22, 2016 @04:42PM (#11552437)
So do we know the hash? I guess we don't or it would be easy for someone to pretend to be Facebook.
Re:1M People Use Facebook Over Tor by c22 on Friday April 22, 2016 @05:04PM (#11552546)
Yes, the hash is "facebookcorewwwi", this is the hash of the public key of one of the keypairs facebook generated. We can't pretend to be facebook without knowledge of the corresponding private key, however.

To make this more clear, most tor hidden service sites that don't have loads of computing power to bruteforce a vanity domain have uris that look like http://3g2upl4pq6kufc4m.onion