News for hackers. Stuff that matters.

A comment on Tor 0day: Finding IP Addresses. Parent comment

Re:Tor 0day: Finding IP Addresses by wp381640 on Thursday September 17, 2020 @02:53AM (#24501881)
Most of them do that now - the better markets have gateways that are CAPTCHA'd and spread out over other providers that then proxy to the real hidden service (you can do this with a second step over Tor again)

Checkout this project which is now being more widely deployed to prevent a lot of these attacks:

https://github.com/onionltd/EndGame

[ Parent | on HN ]
Re:Tor 0day: Finding IP Addresses by anon9001 on Thursday September 17, 2020 @05:13AM (#24502577)
Very cool. I clicked a bunch of links from there and got to here: https://github.com/mikeperry-tor/vanguards/blob/master/READM...

Good overview of threats.

[ Parent | on HN ]
Re:Tor 0day: Finding IP Addresses by chromedev on Thursday September 17, 2020 @03:20AM (#24502004)
Pretty cool, but you'd think they would just have a Dockerimage ready to be deployed and a network driver or something similar for these types of challenges.
[ Parent | on HN ]
Re:Tor 0day: Finding IP Addresses by iudqnolq on Thursday September 17, 2020 @03:27AM (#24502037)
Hope this password advice isn't taken seriously

> TORAUTHPASSWORD - Password which is used for your Tor Control Port Authentication with NGINX. Alphanumeric without spaces (example: passwordIcanremembertyping)

> KEY - Alphanumeric Key for the shared front session key. Random between 64-128 would do fine. (example: isthis64charactorsalreadyicantbelieveitwowsocoolwaitnotyetohdarn)

[ Parent | on HN ]