Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
0
votes
2answers
350 views

How many possible Tor hidden-service addresses are there?

Given the length and character set of .onion domains (e.g. DDG https://3g2upl4pq6kufc4m.onion/), how many possible Tor hidden-service addresses are there?
1
vote
2answers
289 views

Multiple Hidden Services

Is it better to have one server that connects to Tor and connect all the hidden services to that one server, or one server connecting to Tor for each hidden service? The Tor connections will all be ...
0
votes
1answer
167 views

localhost wordpress won't load completely on tor browser

first , sorry for bad English i try to run a wordpress site on local machine and everything is ok but when i brows my site using tor browser page wont load completely an when i click on a link ,[![...
0
votes
2answers
422 views

If Tor is backed by government

If Tor would be backed by government (https://www.zerohedge.com/news/2018-03-02/tor-project-almost-100-funded-us-government-report), which approach would they need to take to technically be able to ...
0
votes
1answer
138 views

Jquery and bootstrap risk for Tor Hidden service

If you make a tor hidden service which has scripts and CSS (the whole core) of bootstrap and the whole Jquery library in the server (and included in the pages). Can you deanonymize the tor hidden ...
1
vote
1answer
552 views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1
vote
1answer
238 views

End-to-End encryption using hidden services

How does end-to-end encryption between Client and Hidden Service work? I am trying to understand more about TOR and how it works and found something about a end-to-end encryption between the client ...
1
vote
1answer
1k views

Can I get a Let's Encrypt certificate for hidden services? [duplicate]

Is it possible to use Let's Encrypt to generate a certificate for an .onion address? From what I read, it is currently not supported, but I wonder whether there are technical reasons preventing it, ...
0
votes
1answer
323 views

How does Tor browser find hidden websites [closed]

I was reading about search engines and i have seen that google for example is crawling and expending it's indexes by finding new links inside of the current websites he is scanning at the time. So my ...
0
votes
1answer
830 views

problem loading page,connection timed out [duplicate]

When i go to hidden wiki 95 percent of the websites will not open. I get a message that connection is timed out because the site took to long to respond I am new to this and I do not know what to try ...
1
vote
1answer
88 views

Backwards Compatibility on the Tor Network

How big of an issue is backwards compatibility on the Tor network? The reason I ask is that my Onion v3 hidden service is set up and ready to go, however I am unsure when to discontinue my Onion v2 ...
0
votes
2answers
95 views

limit tor socks server to a certain hidden service

I have tor running on a pc, with its socks server listening on localhost port 9050. I would like to limit the socks server in this way: socks requests (from clients) should be allowed only for a ...
1
vote
1answer
208 views

Security: Can an exit node be set up with an encrypted connection to the service?

So far it seems that all exit note-to-server connections are communicated in plaintext. Is there a way to add something to a Linux or Windows server so that very last hop is encrypted? Or ...
0
votes
1answer
63 views

Why use a rendez vous point instead of a introduction point?

This is maybe a obvious question but why a client need to use a rendez-vous point instead of directly use a introduction point for communicate with the hidden service? It is because introduction ...
0
votes
1answer
2k views

I need help viewing videos!

How does one view videos on Tor if it will not allow Flash? Is there another way? I have tried several sites, and I am not able to view any videos. What is the solution?
0
votes
1answer
527 views

Tor hidden service is not starting when starting as a daemon

I have a problem with my tor service. Whenever I start tor with command tor then it works and gives me the normal expected output (hidden service is running aswell). Nov 05 18:34:45.896 [notice] Tor ...
0
votes
1answer
87 views

How do Linux global brokers

I have a Linux VPS. I need to go outside and I try to proxy export http_proxy="http://127.0.0.1:8123" export https_proxy="https://127.0.0.1:8123" But not all agents. I have an nginx that needs ...
-1
votes
1answer
712 views

Stopping a DDoS attack on Tor daemon

I've already check How to protect a hidden service against DDOS attack? and How to deal with DDOS attacks? and How to mitigate layer 7 attacks on hidden services?. The problem is not DDoS of web ...
0
votes
2answers
129 views

Hidden Service localisation

Gentlemen I thought something about hidden service an onion server. it's just an assumtion, i've not try ! Is it possible to locate a server ( a country, not a fixed point or public ip, but just ...
1
vote
1answer
80 views

Tor connection comparison inquiry

I am new to Tor and I have been trying to understand its inner workings. I was wondering how many extra trips across the Internet are in a connection to Tor hidden service compared to directly ...
0
votes
2answers
125 views

Can a hidden service operator specify a certain tor relay to always be one of its introductory point

Is it possible to modify hidden service configuration to always include a certain tor relays ip to be its introduction point given the relay has HSDir set.
1
vote
1answer
198 views

Deny a Hidden Service to communicate with servers of one country

I would like to deny my Hidden Services (HS) to speak with any servers from one country but I would like to allow other hop of my circuit to be from that country For example my HS is hosted in ...
0
votes
1answer
309 views

How to set up a Tor hidden service and bind a ServerSocket with secure

Hello everyone.To begin with i write a Server in Java (or maybe i will use an an existing more efficient you know), to serve a Hidden Service. With a few words i configure it so that it will accept ...
0
votes
1answer
536 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
0
votes
1answer
154 views

Why not to add tor2web-like gateways to relays by default?

as it is said in this article https://blog.torproject.org/facebook-hidden-services-and-https-certs whatever it is you think Tor is for, I guarantee there's a person out there who uses it for ...
0
votes
2answers
120 views

Using Ricochet concurrently?

Is it safe to run two ricochet instances on the same system; side-by-side? Is there anything that might conflict (listening ports, etc) that could cause issues? Would you recommend against it for any ...
1
vote
0answers
60 views

How does a HSDIR know which HS descriptor it has?

How does a HSDIR know which HS descriptor it has, and where is the descriptor / identity of the HS stored on the disk of the node ?
1
vote
0answers
80 views

HTTPSEverywhere bug? (forcing onions)

http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org Also "Idea 2" in this post: https://blog.torproject.org/blog/cooking-onions-names-your-onions This function of httpseverywhere no ...
2
votes
1answer
269 views

Hostname Hacking

How do I protect against this vulnerability? https://mascherari.press/dark-web-diaries-hostname-hacking/ > torify curl -H 'Host: localhost' http://myonionaddress.onion It reveals another onion ...
0
votes
0answers
133 views

Problem connection deep web site .onion white page with links [duplicate]

I have looked for my answer but I can not find and come to you... It is impossible for me to access deep web sites, I know the problem does not come from these sites. Here is what happens: when i try ...
3
votes
1answer
511 views

What does the logged Tor warning “Onion address foo requested from a port with .onion disabled” mean?

I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
3
votes
2answers
444 views

Is it possible for an ISP to distinguish between traffic from a relay and traffic from a hidden serivce?

If an ISP was performing deep packet inspection on a server's traffic, would they be able to tell the difference between a hidden service and a relay? To clarify, I'm talking about a "middle relay" - ...
3
votes
1answer
191 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
1
vote
1answer
287 views

A server behind a physical Tor gateway to hide its location

Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access? In my world-...
1
vote
1answer
2k views

Directory Cannot be Readed: Permission Denied after update to 0.3.0 [duplicate]

My hidden service run fine when using 0.2.9.11 on Ubuntu 16.04 server. but get permission denied problem when I update it to 0.3.0.9 log: [notice] Tor 0.3.0.9 (git-100816d92ab5664d) running on Linux ...
2
votes
0answers
218 views

Hidden Service on Qubes Whonix, can not access Onion site from browser

I am trying to set up a hidden service on Qubes on the gateway with the server on a workstation. I followed the Whonix guide and checked to ensure the configuration was valid and that I could get the ...
3
votes
1answer
233 views

Hidden Service with Bootstrap 3

I was wondering if it is possible to host a hidden service and use Bootstrap (cdn or local) css. If bootstrap is to big to handle for Tor, is there any other (lightweight) css framework that would ...
1
vote
1answer
353 views

Why do I see the hidden service directory in my browser?

I configured Tor to set up a hidden service in "c:\webserver\www\hidden_service". When I start Tor Browser, it creates the directory "hidden_service" and the hostname and public_key files inside of it....
0
votes
2answers
121 views

New hidden service want exposure

I just started a new hidden service on tor and I just wanted to ask what's the best way to ensure that people know it exists???
4
votes
1answer
1k views

Access .Onion links using programs other than Tor Browser? (VLC, etc)

How would I be able to access a tor hidden service without the use of TBB? For example, an RTMP server hosted through Tor. In this scenario, I'd like to access the RTMP server using VLC, but VLC would ...
1
vote
1answer
317 views

Hidden tor exit nodes

I was wondering can I run an hidden exit note that only few people know of it, somehow hidden from others? If not can I protect it via password or something so nobody else can access it? Or instead ...
0
votes
1answer
189 views

SSL between onion and web server

I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
3
votes
2answers
342 views

Tor domain name

When will the domain name contain more than 16 characters that are in base 32? (or when will it change from base 32 to base x?) Is it still "worth it" to spend time and processing power to generate a ...
3
votes
2answers
407 views

Are .onion addresses leak-proof?

I want to perform tasks other than web browsing over Tor, for example XMPP chat. I don't want to have to rely on a Tor implementation in the applications themselves, but I do want to avoid leaking my ...
1
vote
0answers
199 views

My hidden service fails to load as long as the Tor Browser is open on the same host

I use my hidden service as a way to access my home computer from my phone securely and regardless of any IP changes. Today, I installed the Tor Browser. After I launched it, the hidden service became ...
2
votes
1answer
444 views

Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation? [closed]

In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that ...
3
votes
1answer
617 views

Fetching v2 rendezvous descriptor failed. Retrying at another directory

My system tor version 0.2.9.10 (on Ubuntu 16.04) is outputing a lot of the following warnings: Fetching v2 rendezvous descriptor failed. Retrying at another directory. Is there some way to fix it? ...
1
vote
0answers
40 views

Is there a way to download “hidden service descriptors” (from Windows)? [duplicate]

Before continuing, I have to say that I have read this thread ("Retrieving hidden service descriptors") and it has not solved the problem. I am doing extensive university work on Tor, and I would ...
0
votes
1answer
638 views

Tor and Exit nodes - just a question

Given the fact that exit nodes seem to be implicated with just about every bad story covering Tor - why have them? Could not the clearweb be left to just continue it's evolution into a corporate ...
0
votes
1answer
500 views

Problems setting up a “Single Onion Service”

I'm doing some Tor tests, and I want to set up a "Single Onion Service". However, when I try to set it, Tor Browser crashes when starts (the exact error is: "Tor exited during startup. This might be ...