News for hackers. Stuff that matters.
Re:3x new books added to the Pirate Library Mirror by jeroenhd on Sunday September 25, 2022 @06:51PM (#32977229)
I wonder why these services don't generate vanity TOR domains. I can generate about 21 TOR addresses beginning with "zlib" per second and it would make bookmarks so much more recognisable if they weren't completely random.

I know relying on names to recognise onion addresses is unsafe, but so is following random links. Why not add at least a little recognisability to the official URL?

Re:3x new books added to the Pirate Library Mirror by runeks on Monday September 26, 2022 @01:56AM (#32979874)
> Why not add at least a little recognisability to the official URL?

Because it doesn't help at all. The first four letters of an onion URL are unimportant because they can be chosen with little effort, as you describe.

Following random links and following random links that start with "zlib" is the same thing.

Re:3x new books added to the Pirate Library Mirror by jeroenhd on Monday September 26, 2022 @05:13AM (#32980971)
It's obviously not a security benefit, it's just nice to have a little branding so you have some idea what the link you're clicking is pretending to be

As you said, it's effectively the same thing, so why not do the tiniest amount of effort and generate some slightly indicative address?

Re:3x new books added to the Pirate Library Mirror by ok_dad on Sunday September 25, 2022 @11:16PM (#32978967)
Because then someone will duplicate the UI and generate a new vanity address and start to do bad stuff under their good name.
Re:3x new books added to the Pirate Library Mirror by jeroenhd on Monday September 26, 2022 @05:11AM (#32980958)
How is that any different from the random character address? I can generate a random address and pretend to be another website and you won't know the difference because all you'll remember about the address is "a while bunch if random letters".
Re:3x new books added to the Pirate Library Mirror by ok_dad on Monday September 26, 2022 @02:02PM (#32986194)
Yea, I guess a stupid computer user would probably fall for it either way, so I admit defeat on this front.

My argument was going to be along the lines of: "a stupid computer user who knows the real address starts with zlib would be tricked easier by another zlib address than if the real site were random, where they might check more thouroughly that they were on the right site..." before being fooled, anyways, probably.