News for hackers. Stuff that matters.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by chejazi on Thursday May 05, 2016 @02:16PM (#11638503)
Perhaps the primary reason is accessibility. Onion addresses are not easily memorized. See https://en.wikipedia.org/wiki/Zooko%27s_triangle

I believe this inconvenience is minor, however.

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by oneloop on Thursday May 05, 2016 @02:45PM (#11638734)
Incidentally, is there any fundamental reason why onion addresses are always so cryptic?
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by devishard on Thursday May 05, 2016 @04:30PM (#11639440)
The answers are correct, but a less cryptographically-related answer:

When you go to a website on the regular internet, the name you type into your URL bar doesn't contain any location information. Instead, you go to a Dynamic Name Server (DNS) server (often run by your ISP) and and get the IP address, which tells your browser where to go.

With Tor, the hashes you see are analogous to the IP in regular internet: they tell your browser where to go. But there's no DNS for Tor, so you can't hide address behind a name.

Incidentally, this story is about SciHub being blocked at the DNS level, meaning that the domain https://sci-hub.io/ was removed from the DNS servers. But it's still available at the IP level at https://31.184.194.81/

This story demonstrates the need for DNS to be decentralized. ICANN has far too much control and is now using it for censorship that holds back the progress of all of humanity.

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by forgotpwtomain on Thursday May 05, 2016 @08:36PM (#11640839)
It's not ICANN censoring them but their registrar which has pulled the domain. I agree that the ICANN monopoly is a bad thing, but the above statement is somewhat misleading.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by oneloop on Thursday May 05, 2016 @06:09PM (#11640033)
So would a sort of decentralized DNS be possible?
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by collinmanderson on Thursday May 05, 2016 @08:55PM (#11640918)
Though even if we decentralize DNS, ICANN controls all of the underlying IP addresses.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by mariuolo on Saturday May 07, 2016 @07:06AM (#11649137)
> Though even if we decentralize DNS, ICANN controls all of the underlying IP addresses.

IANA would have to un-delegate a whole range from RIPE.

I don't see that happening unless they want to fracture the network.

Perhaps Elsevier will be able to force ISPs to blacklist that particular IP, but nothing more.

I also suspect they will move the domain under a ccTLD, not subject to the whims of ICANN.

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by Uw7yTcf36gTc on Thursday May 05, 2016 @07:14PM (#11640426)
check out namecoin. they are attempting that, afaik.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by chadzawistowski on Thursday May 05, 2016 @03:02PM (#11638857)
They don't have to be cryptic, but it takes a lot of brute-forcing to get a memorable one.

Facebook managed to get https://facebookcorewwwi.onion/

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by oneloop on Thursday May 05, 2016 @03:11PM (#11638913)
I get that, my point is why do they have to be brute forced? Why can't you just pick one?
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by roywiggins on Thursday May 05, 2016 @03:49PM (#11639169)
They're hashes. If you don't have the number that hashes to and address, you can't run a server at that address.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by chadzawistowski on Thursday May 05, 2016 @03:33PM (#11639059)
Hashes are easy to run forwards and hard to run backwards.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by curiousgal on Thursday May 05, 2016 @04:18PM (#11639350)
Crypto noob here. Why is that? are the hashes generated from an input randomly?
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by falcolas on Thursday May 05, 2016 @05:00PM (#11639635)
A hash verifies an input, but you can not reproduce the input from a hash.

A simplified version: X % 2 = H

If I give you the formula, and a H of 1, can you, with certainty, tell me that my input was 1029? Cryptographic hashes have a similar property, just with a very large collision space - for Tor only 1 in 36^16 inputs will produce a given hash; yet you still can't guarantee that an input that produces that hash is the original input (and just guessing the possible inputs will take you a very long time).

The downside of our hash above is that it gives you a pretty good clue of what the original input was: if you get an H of 1029 from the forumla X % 10000000 = H, you'll have a pretty good idea of what the X was. Cryptographic hashes do not share this weakness - they will stretch the input, and ensure that there are no clues left as to what the original input was.

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by rzzzt on Thursday May 05, 2016 @04:52PM (#11639589)
https://en.wikipedia.org/wiki/Cryptographic_hash_function

TLDR: they are designed to behave that way. Their alternative name is "one-way hash function".

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by mirimir on Thursday May 05, 2016 @06:36PM (#11640195)
The hash is generated from the onion services's private key.

Edit: I'm wrong. It's based on the hash of the public key. But it's rather confusing. After you create an onion service, you get a private key and an onion address. You don't actually get a public key, just the hostname based on it. I suspect that the public key could be found somehow. But it's not used for anything, that I know of.

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by jfoutz on Thursday May 05, 2016 @09:48PM (#11641137)
Perhaps more intuitive, 11*17 is pretty easy to do in your head, but factoring 187 is much harder
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by DarkLinkXXXX on Thursday May 05, 2016 @03:20PM (#11638971)
They are cryptographically generated.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by wiml on Friday May 06, 2016 @02:12AM (#11642040)
The answer to that is in the Zooko's Triangle link, give it a read.

But, in short: for a name to be useful in a global context, it has to be unambiguous or unique. If there isn't a centralized naming authority / registry, then that means that you can't be able to pick an arbitrary name. (If you could, you could just decide to use the same name as someone else, and now there's no way to figure out which one of you the name indicates.)

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by bradyd on Thursday May 05, 2016 @02:50PM (#11638775)
They are a hash generated from the service's public key.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by mirimir on Thursday May 05, 2016 @06:36PM (#11640200)
No, from its private key! The same key that's used to sign outgoing content, authenticating to the Tor network.

Edit: I'm wrong. It's based on the hash of the public key.

Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by ikeboy on Thursday May 05, 2016 @07:02PM (#11640364)
How can anyone verify a hash of the private key without having it? Anyway, see https://trac.torproject.org/projects/tor/wiki/doc/HiddenServ...
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by mirimir on Thursday May 05, 2016 @08:29PM (#11640805)
I don't know the details. But basically, a Tor relay provides some token to the onion server. The onion server signs that token with its private key, and returns the output to the Tor relay. Then the Tor relay verifies that the token was signed by the private key corresponding to the onion hostname.
Re:Elsevier Complaint Shuts Down Sci-Hub Domain Name by gruez on Thursday May 05, 2016 @08:34PM (#11640826)
What about blockchain based DNS solutions like namecoin?