It's scary to think there are bad people out there actively trying to harm our community :(

Cordially,
Nathaniel Suchy

Dec 12, 2018, 10:46 AM by dgoulet@torproject.org:

 On 12 Dec (09:33:58), Toralf Förster wrote:

On 12/11/18 10:54 PM, nusenu wrote:
from their fingerprints
 I'm just curious that the fingerprints starts with the same sequence. I was
 under the impression that the fingerprint is somehow unique like a hash?

 If one would like to position their relay on the hashring at a specific spot,
 you can bruteforce the key generation to match the first bytes of the
 fingerprint. Usually 4 or 5 bytes are enough and it doesn't take that long to
 compute.

 And because the position on the hashring is predictable over time for hidden
 service *version 2*, then anyone can setup relays that in 5 days will be at
 the right position.

 Thus the importance to catch these relays before they get the HSDir flag that
 is 96 hours of uptime.

 Cheers!
 David

 -- 
 WzhUyhDvWQI2JZglnMWl4fhIHYln5DpMG50IrXaHPLU=

tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays