Hacker News Reader

Comment by ape4 | Hacker News Reader

The url is a bit hard to remember. https://www.nytimes3xbfgragh.onion/ Is there a directory of .onion sites? (with an easy .onion url)

View on HN

There are no “easy” onion URLs. They are essentially random (hash of a key iirc). It’s possible to generate random URLs until you get a prefix you like, but the time it takes increases exponentially with length of the desired prefix.

I wonder why namecoin addresses are not a part of the tor yet. Onion urls should be treated more like IPs.

It's in their works, see their proposal 279: https://gitweb.torproject.org/torspec.git/tree/proposals/279...

As well as this blog post: https://blog.torproject.org/cooking-onions-names-your-onions

See also this ticket for following the progress: https://trac.torproject.org/projects/tor/ticket/10747

I guess there could be a regular website that links to a .onion directory

I recall that Facebook brute forced their way into having an onion url that was easy to remember, by generating millions of them and then picking one that was simple.

That's clearly what the New York Times did as well (though probably with far less compute time than Facebook). nytimes3xbfgragh.onion is the easy to remember name they were able to generate.

Just say it out loud: En Why Times Three Ecks Bee Eff Gra{gargle}

Easy to remember.

Its something like facebookcorewwwi.onion - that must have taken a lot of cycles to generate..

IIRC they got the "corewwwi" part instead of complete nonsense purely out of luck, when searching for just "facebook*"

It was over 100,000,000 CPU-hours https://news.ycombinator.com/item?id=11550922 And they still got extremely lucky to find such a good address. https://news.ycombinator.com/item?id=8538390 It's not usually that easy.

I found blockchainbdgpzk in just under 3 days. It was the sixth blockchain* address I found.

I ran 3x 4 GPU cloud instances on AWS on the old Teslas - which aren't very fast at SHA. IIRC it was doing 15GH/s total

Today you can get ~7GH/s on an Nvidia 1080 so you should be able to find an all-alpha 10 char onion in about a week.

The new cards and some of the password cracking rigs (i'm building a new one now) are able to do SHA1 so quickly that they're a real threat to generating phishing addresses for onions - which is why the DigiCert certificates are required

Reply on news.ycombinator.com