Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

0
votes
1answer
28 views

Tor Filetransfer (FTP) for Webhoster

i'm building a hidden service hosting provider, an actually im able to run a web-/ and Mysql Server full proxied over the tor network. But im wondering how i could realize a file-transfer protocoll ...
3
votes
1answer
90 views

Does Tor still monitor “shadow” relays?

I've been researching methods to monitor hidden services for a university project. I came across this paper which talks about injecting relays as hidden service directories to gather onion addresses. ...
0
votes
1answer
385 views

How to setup Client Authorization for v3 Onion Services

The Tor 0.3.5 series includes client authorization for v3 onion services. Tor manual: To configure client authorization on the service side, the "/authorized_clients/" directory needs to exist. Each ...
2
votes
1answer
69 views

Onion service and dynamic IP

I saw on Tor's FAQ that a Tor Relay can work well with a dynamic IP, I was wondering if it's the same for a service or if it would be sometimes unreachable ?
0
votes
1answer
57 views

Do Tor hidden services have human readable names and if so how does that work?

I'm learning more about the design of Tor and had thought that hidden services use names like duckduckgo.onion but apparently it's (54 character thing).onion? Do they use human readable names and if ...
0
votes
0answers
32 views

How does a user get the public key for a hidden service?

I'm reading up on the Tor design and wondering how one gets the public key for a hidden service? For example if I want the public key for DuckDuckGo's hidden service, how do I get it, and how do I ...
0
votes
0answers
16 views

My hidden web service requires calls to multiple servers. Better to differentiate by hostname or port?

I'm currently running a clearweb service accessible at https://www.mydomain.com. The site links to content, both static (e.g. images, jquery libraries), and dynamic (e.g. ajax calls) on other servers ...
0
votes
1answer
2k views

I need help viewing videos!

How does one view videos on Tor if it will not allow Flash? Is there another way? I have tried several sites, and I am not able to view any videos. What is the solution?
1
vote
2answers
48 views

Are Tor version 2 (16-char) addresses obsolete?

Could I still use a 16-char onion address for a hidden service if I am more concerned about being able to generate a nice "vanity" onion address than hiding the physical location of the service? Does ...
2
votes
1answer
827 views

How to use HAProxy/OnionBalance to create a high availability load balancer for tor hidden service?

I have gone through this question SO but the solution suggested as OnionBalance or other HAProxy options will result in a single point of failure - either the loadbalancer or else the server running ...
0
votes
2answers
415 views

If Tor is backed by government

If Tor would be backed by government (https://www.zerohedge.com/news/2018-03-02/tor-project-almost-100-funded-us-government-report), which approach would they need to take to technically be able to ...
0
votes
1answer
149 views

Why not to add tor2web-like gateways to relays by default?

as it is said in this article https://blog.torproject.org/facebook-hidden-services-and-https-certs whatever it is you think Tor is for, I guarantee there's a person out there who uses it for ...
1
vote
1answer
239 views

Hidden Service as client or relay?

Take a look, what is the difference between Tor-Browser in onion encrypted traffic and Apache service responses in onion encrypted traffic? Tor-Browser: sent 1% / receive 99%. It is simply, ...
0
votes
1answer
75 views

How can I learn more about the technical information about an onion service? (details in the body)

Sorry for the vague question in the title. I wanted to get to the point without loading up the title with unnecessary information. Essentially what I'm trying to ask is 2 questions: Logistically, ...
0
votes
1answer
58 views

Old Tor users can affect my HS?

Lets say a user is using a Tor version from 2013 and decides to connect to my HS that has the latest Tor client. Since the user has an old version of Tor, can the vulns in the Tor version reveal my IP?...
3
votes
2answers
190 views

Tor hidden service bandwith question

I have a newbie question here. When you setup a Tor hidden service do you yourself use up bandwidth on your network or does is the traffic attributed to the relay?
0
votes
1answer
523 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
0
votes
0answers
10 views

New setup on Raspberry Pi 2B

Last time the setup failed. Can anyone tell me the steps of installation of a Tor hidden service? I have already installed Apache2 server with PHP. What to do now? Thanks for answers!
0
votes
1answer
64 views

Missing History

Most of us know of Tor V2 addresses (16 characters) and Tor V3 addresses (56 characters). What about Tor V1 addresses? What was its specification or why wasn't it used much or at all? Example: ...
0
votes
0answers
35 views

Onion service connection to scrubbed failed (connection refused)

Today I tried setting up a v3 onion service, but when I try to connect to the onion service via Tor Browser, I get an error in the server console: [warn] Onion service connection to [scrubbed] ...
0
votes
1answer
160 views

localhost wordpress won't load completely on tor browser

first , sorry for bad English i try to run a wordpress site on local machine and everything is ok but when i brows my site using tor browser page wont load completely an when i click on a link ,[![...
0
votes
1answer
517 views

Tor hidden service is not starting when starting as a daemon

I have a problem with my tor service. Whenever I start tor with command tor then it works and gives me the normal expected output (hidden service is running aswell). Nov 05 18:34:45.896 [notice] Tor ...
0
votes
1answer
57 views

Tor relay giving false HSDir flag

Today my tor relay started reporting the HSDir flag out of nowhere. I do not have a hidden service configured. Is this something i should worry about? Everything looks fine, and i see no services ...
1
vote
1answer
198 views

Deny a Hidden Service to communicate with servers of one country

I would like to deny my Hidden Services (HS) to speak with any servers from one country but I would like to allow other hop of my circuit to be from that country For example my HS is hosted in ...
0
votes
1answer
87 views

How do Linux global brokers

I have a Linux VPS. I need to go outside and I try to proxy export http_proxy="http://127.0.0.1:8123" export https_proxy="https://127.0.0.1:8123" But not all agents. I have an nginx that needs ...
2
votes
1answer
365 views

Does nginx need any additional configuration to run a hidden service safely?

I know that nginx is much safer than Apache for hidden services, but is there any additional configuration that needs/should/is recommended to be done to run a hidden service safely?
0
votes
1answer
88 views

hide IP from webserver software and PHP

I want to setup a hidden service but I would like to hide the IP from the webserver software (nginx here) and PHP, but I'm not sure how to do it? If nginx and PHP can't know the current server IP, no ...
2
votes
2answers
90 views

What prevents someone from listing all the HSP's in the DHT and connecting to them?

I'm not clear on what is actually stored in the DHT, or the contents and purpose of the introduction message. If all of the hidden services are listed in a Distributed Hash Table, what prevents a ...
0
votes
0answers
26 views

Ubuntu - Hidden service configuration throws a permission error

I'm trying to host a hidden service and installed Tor in Ubuntu 18 with Nginx. Following is my torcc configuration. HiddenServiceDir /var/lib/tor/my_hidden_service HiddenServicePort 80 127.0.0.1:8080 ...
1
vote
1answer
532 views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
0
votes
1answer
49 views

Is it possible to get a specific .onion domain or a domain containing a certain string? [duplicate]

I am trying to create an Onion Service however in the configuration guide it appears that Tor generates a random .onion url for each service so I was wondering if there was a way to get a particular ....
0
votes
0answers
85 views

What are the exact technical differences between the error messages when the client cant connect to the hidden service?

when you browse a hidden service which is not there anymore you can see two different error messages. English: Server Not Found / Hmm. We're having trouble finding that site. German: Server nicht ...
1
vote
1answer
41 views

Why do so many HS devs use PHP?

There's a lot of talk that PHP is "inherently insecure" and "great if you want your site to get hacked". I've never used PHP, so I can't make an educated opinion myself, but I am wondering why this is ...
0
votes
1answer
134 views

My tor hidden service stopped working

I have successfully hosted my first .onion site on my Raspberry Pi by following this tutorial. For some reason I needed to stop running this site for a while. So I used this command sudo /etc/init.d/...
0
votes
1answer
414 views

How do I host a wordpress blog on tor?

How do I go about hosting a wordpress blog as a hidden service? Are there providers who will host it for me? Or will I have to configure it myself?
0
votes
0answers
14 views

What technology does Tor use to make computer accessible through public network?

So as we know, to turn a home PC into a server that’s accessible for public requires setting from router to point the public IP to the computer in LAN that you want to use as server. But apparently ...
1
vote
1answer
237 views

nginx leaks my hidden service port number

I have my .onion service running: http://oeptyn6jtusgda63.onion/ When i try to open wrong link, my TorBrowser shows me an error like this: Firefox can’t establish a connection to the server at ...
0
votes
1answer
154 views

I have setup tor on Ubuntu 16.04 using Apache2 It works for an http site, but, I want to make it and https site.

In researching how to do this I notice that I have to purchase an ssl certificate to get it to work. Is this the only way to do this? I am running the onion server from my home computer. It is not ...
0
votes
1answer
188 views

SSL between onion and web server

I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
8
votes
3answers
36k views

How do I add the DuckDuckGo .onion version to the Tor Browser search providers?

By default, DuckDuckGo is included in TBB's default list of search providers in the search bar. But it is only their clearnet site (duckduckgo.com), and not their hidden service version, https://...
0
votes
0answers
53 views

How do we extend our privacy on TOR circuit?

The Tor Browser bounces your communications data through distributed network of relays by encrypting traffic in at least three layers selected from thousands of volunteer computers, thus making ...
2
votes
1answer
193 views

Tor hidden service URLs

I was told years ago that whenever a new hidden service is created it is added to a list, so there is a record of every hidden service ever created. I believe the list is somewhere on the Tor project ...
0
votes
0answers
16 views

Cycling introduction points

Is it possible to cycle your selected introduction points after X time has passed so new introduction points can be selected? If so, how would I achieve this either within the current functionality of ...
0
votes
0answers
35 views

Content Delivery Networks and Tor

For a number of reasons not critical to my question, I've decided that my website, currently on the clear web, would serve my users more effectively as an .onion site. I'm still researching Tor ...
0
votes
0answers
18 views

Stem: Is there a way to add ports to hidden service dynamically?

Is there any way in stem to add a new port to the previously created ephemeral hidden service ? as example, if created a hidden service using stem programmatically on ports 9000 and 9001 If I want to ...
15
votes
3answers
2k views

Can government agencies track what sites I'm visiting when using Tor?

Can agencies such as the NSA or GCHQ track what websites I'm visiting if I'm using the Tor Browser Bundle? What about hidden services?
0
votes
3answers
186 views

What are all the suffixes for websites exclusive to Tor, or at least should be opened only on Tor, and how do I find more?

I just started using the Tor Browser and Orbot on my smartphone and would like to find out what I can do with it. Is there a lot of different Legal and Illegal services?
1
vote
1answer
93 views

Can onion directories find my address? [duplicate]

I know most onion directories use crawlers to collect onion addresses. If I never share my onion address publicly or with anyone, can onion directories still find ways of discovering the address? ...
2
votes
2answers
676 views

Can't use onion mail service with torified claws-mail

I tried to use the hidden service of an email provider with claws mail. I start the client with torify claws mail, but it doesn't work. I only get: Connection to hiddenmailservice.onion:995 failed. ...
4
votes
1answer
1k views

Access .Onion links using programs other than Tor Browser? (VLC, etc)

How would I be able to access a tor hidden service without the use of TBB? For example, an RTMP server hosted through Tor. In this scenario, I'd like to access the RTMP server using VLC, but VLC would ...