So called 'vanity' addresses are essentially a brute force - generating tons of keys until you get one that starts with the prefix you want. The difference is that 'bob1d8rhdu2h.onion' is a lot less specific than facebookwwwi.onion - if Facebook can brute force arbitrary strings like that, they can instead brute force, say, <address of silk road>, or <address of David's hidden service> and then impersonate it. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
- [tor-talk] Facebook brute forcing hidden services Mike Cardwell
- Re: [tor-talk] Facebook brute forcing hidden... David Rajchenbach-Teller
- Re: [tor-talk] Facebook brute forcing hi... Thomas White
- Re: [tor-talk] Facebook brute forcin... David Rajchenbach-Teller
- Re: [tor-talk] Facebook brute fo... Sam Pizzey
- Re: [tor-talk] Facebook bru... s7r
- Re: [tor-talk] Facebook... Sam Pizzey
- Re: [tor-talk] Facebook bru... Virilha
- Re: [tor-talk] Facebook brute fo... Mike Cardwell
- Re: [tor-talk] Facebook bru... David Rajchenbach-Teller
- Re: [tor-talk] Facebook brute forcing hidden... Roger Dingledine
- Re: [tor-talk] Facebook brute forcing hi... Mike Cardwell
- Re: [tor-talk] Facebook brute forcing hi... Nick Mathewson
- Re: [tor-talk] Facebook brute forcing hi... Roger Dingledine