Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

82 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
295 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
3
votes
1answer
5k views

How to open a .onion site?

I heard of the Tor browser from friend and downloaded it. I'm curious to see what exists on the .onion sites but all the ones I tried shows me an error message telling me that there is a connection ...
2
votes
1answer
147 views

Can I run multiple hidden services without anyone knowing they are hosted on the same server?

I want to host multiple hidden services but I need it in a way that people cannot find out that they are all hosted on the same server. How could I do this?
2
votes
0answers
232 views

Hidden Service on Qubes Whonix, can not access Onion site from browser

I am trying to set up a hidden service on Qubes on the gateway with the server on a workstation. I followed the Whonix guide and checked to ensure the configuration was valid and that I could get the ...
2
votes
1answer
904 views

How to use HAProxy/OnionBalance to create a high availability load balancer for tor hidden service?

I have gone through this question SO but the solution suggested as OnionBalance or other HAProxy options will result in a single point of failure - either the loadbalancer or else the server running ...
2
votes
2answers
396 views

Does nginx need any additional configuration to run a hidden service safely?

I know that nginx is much safer than Apache for hidden services, but is there any additional configuration that needs/should/is recommended to be done to run a hidden service safely?
2
votes
0answers
164 views

Not able to register/login facebook hidden service with Javascript enabled

I'm trying to use facebook's hidden service to create an pseudonymous facebook account. For registering or logging in to facebook you have to enable javascript and I did that by clicking on the ...
2
votes
0answers
651 views

Tor unexpectedly exits

I tried to start a hidden service on mac with MAMP and tor browser. I added the line HiddenServiceDir /Users/Gary/Desktop/tor_site HiddenServicePort 4023 127.0.0.1:4023 into my torrc file in ...
2
votes
0answers
169 views

How do overlay network nodes communicate without IP addresses?

I've been reading about how Tor and I2P use cryptographic addresses to send messages to other nodes, but how does this work? I looked through the documentation for each and neither is very clear on ...
2
votes
0answers
1k views

Issues setting up hidden service on Android

I am trying to setup a hidden service on an android device but cannot seem to get it to work. I have installed Palapa server and the website is available on localhost as well as over my network (for ...
2
votes
0answers
696 views

Cannot connect to hidden services

In the past few days, I faced a problem that never occurred to me before: when trying to access .onion sites, the page times out after trying to connect. This is what it says: Unable to connect ...
2
votes
0answers
2k views

Tor Secret Key isn't working on local host server

I'm new to Tor, and so far I've managed to get public & secret keys. But when I try to run my public key on my Tor browser, it says "Unable to Connect" and the sub-line is "Firefox can't establish ...
2
votes
0answers
1k views

facebookcorewwwi problems on Tor

I am trying to access https://facebookcorewwwi.onion/ but it fails after login on https://facebookcorewwwi.onion/checkpoint/?next with the error message Sorry, something went wrong Please try ...
2
votes
0answers
93 views

Web of trust for Hidden Services keys

Is it possible right now, with the current version of Tor, to use a distributed web of trust in Hidden Sevices' public keys, meaning: Public keys are uploaded to public keyservers Users can search ...
2
votes
1answer
2k views

Problems with opening certain .onion websites

I'm hunting for nice cannabis strains but when I use .onion website links with Tor program, only a few of them open up but everything that has better reviews and products (for example, DeepWeb, ...
1
vote
1answer
39 views

hidden_services only works with invalid permissions

When I try to start tor with invalid permission, I get the following error: $ ./start-tor.sh [sudo] password for user: Oct 08 18:20:32.210 [notice] Tor 0.4.0.5 running on Linux with Libevent 2.0.21-...
1
vote
1answer
100 views

TOR Hidden Service: IP anonymity

Suppose that a Tor client wants to access a certain hidden service. According to the protocol, instead of submitting a request directly to the server IP (which is hidden[1][2]), this client submit a ...
1
vote
1answer
51 views

making request onion sites without tor

I made a simple server at my home hosted by tor. The server contains my personal files and i dont like paying services for hosting websites because hosting on tor is free and hidden. It doesn't matter ...
1
vote
0answers
69 views

What is a private Tor network

While reading about botnets leveraging Tor hidden services for command and control I came across a term I have never seen or read about anywhere a private Tor network I tried researching this term ...
1
vote
0answers
105 views

Connect to TOR serivce to upload files FTP/SFTP

I would like to upload some files to my .onion website over FTP/SFTP securely however I cannot figure how to connect. Any help? I have added the following to /etc/tor/torrc: HiddenServiceDir /var/...
1
vote
1answer
48 views

Why do so many HS devs use PHP?

There's a lot of talk that PHP is "inherently insecure" and "great if you want your site to get hacked". I've never used PHP, so I can't make an educated opinion myself, but I am wondering why this is ...
1
vote
1answer
106 views

hide IP from webserver software and PHP

I want to setup a hidden service but I would like to hide the IP from the webserver software (nginx here) and PHP, but I'm not sure how to do it? If nginx and PHP can't know the current server IP, no ...
1
vote
0answers
316 views

Unable to connect to localhost or 127.0.0.1

I am trying to setup onion hidden service and i am using xampp default apache web server. I setup everything correctly and got my hostname and private key but the main problem i am getting is that i ...
1
vote
1answer
661 views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1
vote
1answer
207 views

Deny a Hidden Service to communicate with servers of one country

I would like to deny my Hidden Services (HS) to speak with any servers from one country but I would like to allow other hop of my circuit to be from that country For example my HS is hosted in ...
1
vote
0answers
63 views

How does a HSDIR know which HS descriptor it has?

How does a HSDIR know which HS descriptor it has, and where is the descriptor / identity of the HS stored on the disk of the node ?
1
vote
0answers
81 views

HTTPSEverywhere bug? (forcing onions)

http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org Also "Idea 2" in this post: https://blog.torproject.org/blog/cooking-onions-names-your-onions This function of httpseverywhere no ...
1
vote
0answers
219 views

My hidden service fails to load as long as the Tor Browser is open on the same host

I use my hidden service as a way to access my home computer from my phone securely and regardless of any IP changes. Today, I installed the Tor Browser. After I launched it, the hidden service became ...
1
vote
0answers
857 views

Troubleshooting ssh over tor connection

I've tried to set up the use of ssh via tor. /etc/tor/torrc: [...] HiddenServiceDir /var/lib/tor/sshd HiddenServicePort 443 127.0.0.1:443 /var/lib/tor/sshd has the hostname and private_key after ...
1
vote
0answers
155 views

Hidden service not accessible after configuring transparent proxy

I am configuring a transparent proxy on my server using the instructions given here https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy Everything is fine, I make required changes to ...
1
vote
0answers
608 views

How to host multiple hidden services with XAMPP or Apache?

Ok, so my operating system is Windows 8, Vidalia Tor Browser Bundle Control, and XAMPP server. I have done the following steps with no success at getting more than one service running, and many times ...
1
vote
0answers
340 views

How to change orbot android hidden service address?

I'm trying to get a new onion address for my hidden service on Orbot. The problem is it does not auto generate a hostname. How can I force this app to do so?
1
vote
0answers
39 views

Performance issues in single guard for hidden services

From what I can read in this recent post in the Tor blog, Hidden Services use one single guard, just as regular clients do. How does this affect the performance of hidden services? I know that since ...
1
vote
0answers
70 views

.Onion not viewable, apache2 is working

I've been trying to get a hidden service up and running for a while now. I've followed several guides and they all pretty much say the same thing. I've opened up the port that I have apache2 listening ...
1
vote
1answer
255 views

Hidden Service as client or relay?

Take a look, what is the difference between Tor-Browser in onion encrypted traffic and Apache service responses in onion encrypted traffic? Tor-Browser: sent 1% / receive 99%. It is simply, ...
1
vote
0answers
55 views

Can high network usage be detected and prevented in Tor?

I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using a hidden service. If so, what are the default prevention steps?
1
vote
0answers
186 views

Facebook's onion site and Adblock Plus

If you don't know already, you can use Adblock Plus scripts to modify how https://facebook.com/ works. And you can even do things to improve your privacy, such as disabling the "message seen" feature ...
1
vote
0answers
216 views

Hidden service private key chain

Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the ...
1
vote
0answers
301 views

Tor Hidden service directories DHT topology

what is the topology of the DHT used by Tor's hidden services ? and while i understand 6 nodes will be responsible for a single HS, how many nodes would a client need to visit before finding the ...
1
vote
0answers
185 views

Hosting hidden service

I am trying to set up my own hidden service. My last problem with torrc file has been sorted, I still have another problem. Website is not loading on tor, at all. It is accessible via Chrome at 127.0....
1
vote
0answers
25 views

Weighted Bandwidth for Rendezvous Points

I wonder how the WeightedBandwidth for Rendezvous Points (RPs) is calculated. I know, its a bit complicated, because RPs are chosen in a lot of different ways: Tor tries to reuse existing circuit ...
1
vote
0answers
14 views

How hard should tor aware applications try to share tor daemons?

How advantageous to anonymity is it for different tor aware applications to share a tor daemon instance? Examples : I’m running both TBB and Pond does it improve anonymity much for both TBB and ...
1
vote
0answers
1k views

I can't set up a hidden service, can anyone tell me what the problem is?

I'm running Windows 8 and Savant 3.1. I have the DNS set to localhost:80 and it works in a normal browser. Here's where the problem sits. I add the following to the bottom of torrc: HiddenServiceDir ...
1
vote
1answer
124 views

Is an Hidden Service directory the same thing as a Directory Server?

I'm trying to get a better idea of the cast of characters that comprise the Tor network structure and am hung up a bit on the distinction between these.
0
votes
0answers
15 views

DDoS attacks on cryptomarkets

Recently, the big cryptomarkets have been under DDoS attacks and one of their admin stated that the attack has been conducted by only one person (Reddit post). According to that person, the attacker ...
0
votes
1answer
24 views

Are contents of a hidden service secure if the service is HTTP?

If I host a hidden service without HTTPS, can a compromised exit node (on either server side or client side), read or write any contents of the site? Also, is it more secure to use HTTPS on a hidden ...
0
votes
1answer
16 views

Distributed Hash Table DHT minimum relays needed

(BLUF) How many relays are needed to create a workable TOR Distributed Hash Table? My original question was "what would cause the TB to log a valid HS name to be "invalid" and "rejected". After ...
0
votes
1answer
41 views

In onion v3 services, how does the client know the “HSDir” that have the necessary descriptor to connect to the onion service?

I've read the "Tor Rendezvous Specification - Version 3" and I can't find out how the client knows the "HSDir" nodes that store the onion service descriptor that indicates the introduction points ...
0
votes
0answers
21 views

Questions about the onion v3 services keys

As far as I understand (if there is any error, please correct it), when configuring an onion v3 service, three files are generated: "hostname", "hs_ed25519_secret_key" and "hs_ed25519_public_key". The ...
0
votes
1answer
60 views

How to setup a local hidden service

How do i setup a private hidden service on localhost My question is how do i setup a private hidden service that can not be accessed by rest of the Tor network i wish to run this hidden service on my ...