4 ms·

I used to think it was .onion. I owned my .onion domains in the sense than only I had the private key that corresponded to the hash that was my brute forced van

I used to think it was .onion. I owned my .onion domains in the sense than only I had the private key that corresponded to the hash that was my brute forced vanity domain. I thought that meant I had control over them. I was wrong. It turns out that even in p2p networks if there's one one dominant development group then that group owns your domains. The Tor Project decided that tor v2, with all it's potential exploits, could not exist alongside tor v3 and so all the tor v2 domains will disappear to the official tor clients this october 26th. I don't own my .onions so I won't be making v3 sites.

RL_Quine 5y ago
You literally explain in your comment that you’re mad that you can’t continue to use a known vulnerable system which has been out of vogue for years. I’m confused.
- detaro 5y ago
  They also explain why, so no need to be confused.
  - RL_Quine 5y ago
    An explanation which makes no sense isn't a good explanation.
    - superkuh 5y ago
      Most people hear "tor" and they immediately think of illegal, shady stuff. And yeah, there's a lot of that there. So, for the last decade The Tor Project has been promoting onion sevices as a thing for everyone and that people should put their normal sites on tor too. There's more normal people than shady people and if we all use tor it could legitimize it. Well, I did. I really put all my normal sites on tor too as hidden services. And I got a lot of traffic, even after I stripped out the bots that made up 3/4 of it. My usage didn't really depend on absolute security. Even with the possible hash collisions it was safer than giving all trust to some centralized corporation at the start. So, I wanted to keep using it. But the tor projects real priorities, obviously, lie with absolute security. They were never serious about making tor and onion services a place for everyone. They only care about the people that care about security to the detriment of all else. So... knowing this, I'll stop using tor for my websites since it's only for security first and only types.
      - dragonwriter 5y ago
        > Most people hear “tor” and they immediately think of illegal, shady stuff. To be fair, the US intelligence community created it for (what is, from the perspective of the governments in whose juridiction the actions were to be carried out, at least) extremely illegal, shady stuff, and relies on lots of people using it, including for other illegal, shady stuff, to make use for and concealment of the kind of illegal, shady stuff it is meant for effective. So, that’s exactly what people should think. All other use is incidental and supportive of the primary purpose.
lucb1e 5y ago
You do have control over them because, indeed, you have the private keys (and the NSA too, reminds me of the Facebook setting "only me+NSA" (only three quarters joking)). You want to run v2 domains? Go ahead, but the people that want to visit your legacy addresses must use the legacy software. It seems like an inherent risk with software-controlled domains that the (old) software (version) might not be used anymore.
- exikyut 5y ago
  Just googled "only me+nsa" and got literally 4 results. Huh. Got a screenshot or citation for that? Very curious, never used facebook.
  - epse 5y ago
    It's a meme where a screenshot of fb post visibility settings is edited to change the "only me" option to "only me and the NSA"
    - exikyut 5y ago
      Ah :D. Definitely fell for that one, thought for a moment that maybe it existed at the very start or something.
  - egberts 5y ago
    https://www.pinterest.com/pin/239535273909285486/ https://www.pinterest.com/pin/239535273909285486/
    - exikyut 5y ago
      D'oh, the misspelling of "Ony" is really distracting. Certainly makes the point though. :V (Pinterest has a use, for once...)
tylersmith 5y ago
You still have control over your v2 address, you just can't force others to use it with their software.
icehawk 5y ago
They have, since 2018. Given the exploits in the v2 onion sites, (suitably modified HSDirs being able to discover them and whatnot) the writing has been on the wall since well before then and it shouldn't be a surprise that they're going away.
deleted 5y ago
[deleted]

RL_Quine 5y ago

You literally explain in your comment that you’re mad that you can’t continue to use a known vulnerable system which has been out of vogue for years. I’m confused.

detaro 5y ago
They also explain why, so no need to be confused.
- RL_Quine 5y ago
  An explanation which makes no sense isn't a good explanation.
  - superkuh 5y ago
    Most people hear "tor" and they immediately think of illegal, shady stuff. And yeah, there's a lot of that there. So, for the last decade The Tor Project has been promoting onion sevices as a thing for everyone and that people should put their normal sites on tor too. There's more normal people than shady people and if we all use tor it could legitimize it. Well, I did. I really put all my normal sites on tor too as hidden services. And I got a lot of traffic, even after I stripped out the bots that made up 3/4 of it. My usage didn't really depend on absolute security. Even with the possible hash collisions it was safer than giving all trust to some centralized corporation at the start. So, I wanted to keep using it. But the tor projects real priorities, obviously, lie with absolute security. They were never serious about making tor and onion services a place for everyone. They only care about the people that care about security to the detriment of all else. So... knowing this, I'll stop using tor for my websites since it's only for security first and only types.
    - dragonwriter 5y ago
      > Most people hear “tor” and they immediately think of illegal, shady stuff. To be fair, the US intelligence community created it for (what is, from the perspective of the governments in whose juridiction the actions were to be carried out, at least) extremely illegal, shady stuff, and relies on lots of people using it, including for other illegal, shady stuff, to make use for and concealment of the kind of illegal, shady stuff it is meant for effective. So, that’s exactly what people should think. All other use is incidental and supportive of the primary purpose.

lucb1e 5y ago

You do have control over them because, indeed, you have the private keys (and the NSA too, reminds me of the Facebook setting "only me+NSA" (only three quarters joking)). You want to run v2 domains? Go ahead, but the people that want to visit your legacy addresses must use the legacy software. It seems like an inherent risk with software-controlled domains that the (old) software (version) might not be used anymore.

exikyut 5y ago
Just googled "only me+nsa" and got literally 4 results. Huh. Got a screenshot or citation for that? Very curious, never used facebook.
- epse 5y ago
  It's a meme where a screenshot of fb post visibility settings is edited to change the "only me" option to "only me and the NSA"
  - exikyut 5y ago
    Ah :D. Definitely fell for that one, thought for a moment that maybe it existed at the very start or something.
- egberts 5y ago
  https://www.pinterest.com/pin/239535273909285486/ https://www.pinterest.com/pin/239535273909285486/
  - exikyut 5y ago
    D'oh, the misspelling of "Ony" is really distracting. Certainly makes the point though. :V (Pinterest has a use, for once...)

tylersmith 5y ago

You still have control over your v2 address, you just can't force others to use it with their software.

icehawk 5y ago

They have, since 2018. Given the exploits in the v2 onion sites, (suitably modified HSDirs being able to discover them and whatnot) the writing has been on the wall since well before then and it shouldn't be a surprise that they're going away.

deleted 5y ago

[deleted]