News for hackers. Stuff that matters.

A comment on Why offer an Onion Address rather than just encourage browsing-over-Tor?. Parent comment

Re:Why offer an Onion Address rather than just encourage bro... by thealig on Thursday March 10, 2022 @03:42AM (#30624654)
the article talks about the research stumbling upon exit nodes performing MITM and other sniffing but does not refer to the exact details. is there a paper for this?

only found this paper going over systematic process of exposing bad relays - http://www.cs.kau.se/philwint/spoiled_onions/pets2014.pdf

[ Parent | on HN ]
Re:Why offer an Onion Address rather than just encourage bro... by codsane on Thursday March 10, 2022 @07:52AM (#30626328)
It’s not related to that particular article, but you might find this interesting, they write about a lot of similar research: https://nusenu.medium.com/tracking-one-year-of-malicious-tor...
[ Parent | on HN ]
Re:Why offer an Onion Address rather than just encourage bro... by heavyset_go on Thursday March 10, 2022 @04:34AM (#30625025)
What research are you talking about? The article talks about at least two different researchers working on separate projects.

Here's the link for first one:https://web.archive.org/web/20150705184539/https://chloe.re/...

[ Parent | on HN ]
Re:Why offer an Onion Address rather than just encourage bro... by thealig on Thursday March 10, 2022 @11:51AM (#30629072)
well, was referring to the research indicated by the title of the article- honeypot setup to detect malicious exit relays.

yes thats the one. interesting, seems they caught 15 unique relays harvesting logins. There seems to be scope to improve reporting and detection of malicious actors like this. They also have a block list on Tor's gitlab repo but doesn't seem to be up to date.

[ Parent | on HN ]