[tor-talk] OnionCloner

Nicholas Suan tor-talk at nonexiste.net
Sun Sep 13 22:02:05 UTC 2015


It seems part of the issue is that onion.link has a problem w/ 301 redirects:

Apache's directory listing redirect is a good example:
http://roliath.nonexiste.net/test
vs: http://7bpctwm7axcaycud.onion.link/test
and: https://7bpctwm7axcaycud.tor2web.org/test

On Tue, Sep 8, 2015 at 7:45 AM, Virgil Griffith <i at virgil.gr> wrote:
> Here's an example site that does this:
>
> http://deepdot35wvmeyd5.onion
>
> This URL works on TBB but when using tor2web, e.g.,
>
>
> http://deepdot35wvmeyd5.onion.link
>
> Goes into infinite redirect.
>
>
>> The problem does not reside in Tor and cannot be solved by Tor.
> I can see that. Point taken. Maybe OnioNS will improve matters.
>
> -V
>
> On Tue, 8 Sep 2015 at 11:20 grarpamp <grarpamp at gmail.com> wrote:
>
>> On Mon, Sep 7, 2015 at 11:23 PM, Virgil Griffith <i at virgil.gr> wrote:
>> > At tor2web we've found a number of popular .onion sites coming up as
>> > infinite redirects.
>>
>> > tor2web is collateral damage.
>>
>> Illogical. What sites? Redirects to what?
>> A true infinite redirect by and to the canonical host onion
>> itself is by definition not a popular site.
>> Block whatever it is [as useless] if it's crashing you.
>>
>> > the Onion Cloner script
>>
>> Then that particular cloner, of which there are many,
>> shows their retard level by not handling that case.
>>
>> > (1) what are the current techniques for detecting Onion Cloner?
>>
>> Latency is the only foolproof one.
>>
>> > (2) is there a plan on the horizon for dealing with Onion Clones?
>>
>> The problem does not reside in Tor and cannot be solved by Tor.
>>
>> But you can use your bookmarks / TLS, trust whatever
>> entities / communities you believe, add unique naming
>> layers, detectors, and whatever else you want on top.
>> --
>> tor-talk mailing list - tor-talk at lists.torproject.org
>> To unsubscribe or change other settings go to
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>>
> --
> tor-talk mailing list - tor-talk at lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


More information about the tor-talk mailing list