Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.misc > #24445 > unrolled thread

YIKES! Public IP Addresses of Tor Sites Exposed via SSL Certificates

Started byFritz Wuehler <fritz@spamexpire-201809.rodent.frell.theremailer.net>
First post2018-09-05 17:07 +0000
Last post2018-09-12 19:55 +0000
Articles 4 — 3 participants

Back to article view | Back to comp.os.linux.misc


Contents

  YIKES! Public IP Addresses of Tor Sites Exposed via SSL Certificates Fritz Wuehler <fritz@spamexpire-201809.rodent.frell.theremailer.net> - 2018-09-05 17:07 +0000
    Re: YIKES! Public IP Addresses of Tor Sites Exposed via SSL Certificates Roger Johnson <rogerjohnson3@updata.net> - 2018-09-06 14:10 +0100
    Re: YIKES! Public IP Addresses of Tor Sites Exposed via SSL Certificates Neodome Admin <admin@neodome.net> - 2018-09-10 21:59 +0000
      Re: YIKES! Public IP Addresses of Tor Sites Exposed via SSL Certificates Neodome Admin <admin@neodome.net> - 2018-09-12 19:55 +0000

#24445 — YIKES! Public IP Addresses of Tor Sites Exposed via SSL Certificates

FromFritz Wuehler <fritz@spamexpire-201809.rodent.frell.theremailer.net>
Date2018-09-05 17:07 +0000
SubjectYIKES! Public IP Addresses of Tor Sites Exposed via SSL Certificates
Message-ID<3a5cf326543fb461ba75c21fad4c11d9@msgid.frell.theremailer.net>
<https://www.bleepingcomputer.com/news/security/public-ip-addresses-of-tor-sites-exposed-via-ssl-certificates/>

[toc] | [next] | [standalone]


#24454

FromRoger Johnson <rogerjohnson3@updata.net>
Date2018-09-06 14:10 +0100
Message-ID<pmr90j$sro$1@news.mixmin.net>
In reply to#24445
On Wed, 05 Sep 2018 17:07:43 +0000, Fritz Wuehler wrote:

> <https://www.bleepingcomputer.com/news/security/public-ip-addresses-of-tor-sites-exposed-via-ssl-certificates/>

"A security researcher has found a method that can be used to easily
identify the public IP addresses of misconfigured dark web servers. 

He is exposing the pitfalls of not knowing how to properly configure a
hidden service."

[toc] | [prev] | [next] | [standalone]


#24482

FromNeodome Admin <admin@neodome.net>
Date2018-09-10 21:59 +0000
Message-ID<pn6pgm$kvk$1@neodome.net>
In reply to#24445
Fritz Wuehler <fritz@spamexpire-201809.rodent.frell.theremailer.net> wrote:
> <https://www.bleepingcomputer.com/news/security/public-ip-addresses-of-tor-sites-exposed-via-ssl-certificates/>

I don't see a reason for .onion service to use SSL certificate is such
service is available only from within Tor.

-- 
Neodome

[toc] | [prev] | [next] | [standalone]


#24496

FromNeodome Admin <admin@neodome.net>
Date2018-09-12 19:55 +0000
Message-ID<pnbr01$8rr$1@neodome.net>
In reply to#24482
Neodome Admin <admin@neodome.net> wrote:
> Fritz Wuehler <fritz@spamexpire-201809.rodent.frell.theremailer.net> wrote:
>> <https://www.bleepingcomputer.com/news/security/public-ip-addresses-of-tor-sites-exposed-via-ssl-certificates/>
> 
> I don't see a reason for .onion service to use SSL certificate is such
> service is available only from within Tor.
> 

Sorry. *If* such service is available...

-- 
Neodome

[toc] | [prev] | [standalone]


Back to top | Article view | comp.os.linux.misc


csiph-web