News for hackers. Stuff that matters.

A comment on Making Connections to Facebook More Secure. Parent comment

Re:Making Connections to Facebook More Secure by AlyssaRowan on Friday October 31, 2014 @09:15AM (#8538540)
That is extremely lucky. That's, what, 82 bits if you'd chosen the whole thing?

A more manageable 61 bits for 12 characters or so, from my recollection. Did you pile a dictionary attack on top of that?

I don't believe this does "break hidden services". That's just a truncated key fingerprint, not the key, and a collision would I suspect (but haven't checked) be a loudly visible error.

[ Parent | on HN ]
Re:Making Connections to Facebook More Secure by sgrenfro on Friday October 31, 2014 @09:21AM (#8538564)
Roger Dingledine (Tor project, not FB) shared some accurate background here: https://lists.torproject.org/pipermail/tor-talk/2014-October...
[ Parent | on HN ]
Re:Making Connections to Facebook More Secure by tux3 on Friday October 31, 2014 @01:20PM (#8539897)
>That's just a truncated key fingerprint, not the key, and a collision would I suspect (but haven't checked) be a loudly visible error.

Actually, a name collision would still mean hijacking the traffic, even if they don't have the same private key. The last HS to announce "owns" the name.

[ Parent | on HN ]