News for hackers. Stuff that matters.
Re:Why offer an Onion Address rather than just encourage bro... by idontwantthis on Thursday March 10, 2022 @05:05AM (#30625175)
What does compromising the exit do? I thought the layering means you would need to compromise the entire path to do anything.
Re:Why offer an Onion Address rather than just encourage bro... by foxfluff on Thursday March 10, 2022 @05:47AM (#30625446)
Exit node is where the tor-encrypted path ends and traffic goes to the clearnet.
Re:Why offer an Onion Address rather than just encourage bro... by idontwantthis on Thursday March 10, 2022 @06:37AM (#30625803)
What’s the point of any of it then to a paranoid user?
Re:Why offer an Onion Address rather than just encourage bro... by Shish2k on Friday March 11, 2022 @01:43PM (#30644215)
The reason to use the tor<->plaintext bridge is to route around censorship, eg the great firewall of china, or various western ISPs blackholing the pirate bay, and also to prevent the server from learning much about the client’s identity

If you don’t want any MITM possibilities, that’s what the onion services are for (both client and server are speaking over tor connections)

Re:Why offer an Onion Address rather than just encourage bro... by lazide on Thursday March 10, 2022 @10:14AM (#30627800)
Got me - it looks like a decently effective honeypot though for ‘paranoid but hasn’t thought it all the way through’
Re:Why offer an Onion Address rather than just encourage bro... by crtasm on Thursday March 10, 2022 @11:32PM (#30636213)
the exit node has no knowledge of your IP address and your traffic should still be protected by HTTPS.
Re:Why offer an Onion Address rather than just encourage bro... by ufmace on Thursday March 10, 2022 @02:39PM (#30631436)
Because it switches over to the clearnet there, the operator could do stuff like intercept non-https traffic or use a malicious DNS to attempt to MITM https traffic.