Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
0
votes
2answers
58 views

Can a onion domain I register be discovered if I don't make it public?

This tutorial teaches how to register a hidden service and point it to a server's SSH port, so that we can keep this port closed on the open Internet and acess it from inside Tor network. Of course ...
2
votes
2answers
388 views

Does nginx need any additional configuration to run a hidden service safely?

I know that nginx is much safer than Apache for hidden services, but is there any additional configuration that needs/should/is recommended to be done to run a hidden service safely?
0
votes
1answer
37 views

Are Tor connections *that* unstable?

I'm okay with the Tor network being slow, but I often have the issue that I can't connect to my own hidden services at all. I imagine the problem are the nodes in between, because sometime later then ...
0
votes
1answer
50 views

How to setup a local hidden service

How do i setup a private hidden service on localhost My question is how do i setup a private hidden service that can not be accessed by rest of the Tor network i wish to run this hidden service on my ...
0
votes
2answers
46 views

Why doesn't curl download from file a onion service?

I am attempting to download a file from a hidden service using curl. I downloaded the Tor client and launched it and from another terminal executed this: curl --socks5 socks5://127.0.0.1:9050 https://...
1
vote
1answer
50 views

TOR Hidden Service: IP anonymity

Suppose that a Tor client wants to access a certain hidden service. According to the protocol, instead of submitting a request directly to the server IP (which is hidden[1][2]), this client submit a ...
0
votes
2answers
605 views

How to setup Client Authorization for v3 Onion Services

The Tor 0.3.5 series includes client authorization for v3 onion services. Tor manual: To configure client authorization on the service side, the "/authorized_clients/" directory needs to exist. Each ...
1
vote
1answer
31 views

making request onion sites without tor

I made a simple server at my home hosted by tor. The server contains my personal files and i dont like paying services for hosting websites because hosting on tor is free and hidden. It doesn't matter ...
1
vote
0answers
137 views

Onion service connection to scrubbed failed (connection refused)

Today I tried setting up a v3 onion service, but when I try to connect to the onion service via Tor Browser, I get an error in the server console: [warn] Onion service connection to [scrubbed] ...
0
votes
0answers
18 views

In onion v3 services, how does the client know the “HSDir” that have the necessary descriptor to connect to the onion service?

I've read the "Tor Rendezvous Specification - Version 3" and I can't find out how the client knows the "HSDir" nodes that store the onion service descriptor that indicates the introduction points ...
2
votes
1answer
143 views

Can I run multiple hidden services without anyone knowing they are hosted on the same server?

I want to host multiple hidden services but I need it in a way that people cannot find out that they are all hosted on the same server. How could I do this?
2
votes
1answer
889 views

How to use HAProxy/OnionBalance to create a high availability load balancer for tor hidden service?

I have gone through this question SO but the solution suggested as OnionBalance or other HAProxy options will result in a single point of failure - either the loadbalancer or else the server running ...
0
votes
0answers
13 views

Questions about the onion v3 services keys

As far as I understand (if there is any error, please correct it), when configuring an onion v3 service, three files are generated: "hostname", "hs_ed25519_secret_key" and "hs_ed25519_public_key". The ...
0
votes
2answers
448 views

If Tor is backed by government

If Tor would be backed by government (https://www.zerohedge.com/news/2018-03-02/tor-project-almost-100-funded-us-government-report), which approach would they need to take to technically be able to ...
0
votes
1answer
159 views

Why not to add tor2web-like gateways to relays by default?

as it is said in this article https://blog.torproject.org/facebook-hidden-services-and-https-certs whatever it is you think Tor is for, I guarantee there's a person out there who uses it for ...
1
vote
1answer
254 views

Hidden Service as client or relay?

Take a look, what is the difference between Tor-Browser in onion encrypted traffic and Apache service responses in onion encrypted traffic? Tor-Browser: sent 1% / receive 99%. It is simply, ...
0
votes
1answer
82 views

How can I learn more about the technical information about an onion service? (details in the body)

Sorry for the vague question in the title. I wanted to get to the point without loading up the title with unnecessary information. Essentially what I'm trying to ask is 2 questions: Logistically, ...
0
votes
1answer
63 views

Old Tor users can affect my HS?

Lets say a user is using a Tor version from 2013 and decides to connect to my HS that has the latest Tor client. Since the user has an old version of Tor, can the vulns in the Tor version reveal my IP?...
0
votes
1answer
581 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
0
votes
1answer
66 views

Missing History

Most of us know of Tor V2 addresses (16 characters) and Tor V3 addresses (56 characters). What about Tor V1 addresses? What was its specification or why wasn't it used much or at all? Example: ...
0
votes
1answer
179 views

localhost wordpress won't load completely on tor browser

first , sorry for bad English i try to run a wordpress site on local machine and everything is ok but when i brows my site using tor browser page wont load completely an when i click on a link ,[![...
0
votes
1answer
569 views

Tor hidden service is not starting when starting as a daemon

I have a problem with my tor service. Whenever I start tor with command tor then it works and gives me the normal expected output (hidden service is running aswell). Nov 05 18:34:45.896 [notice] Tor ...
5
votes
3answers
9k views

It is possible to find a Tor page based on the 512-bit hash?

On the internet there is unsolved mystery of 3301/Cicada where decrypted text says: "AN END. WITHIN THE DEEP WEB TH ERE EXISTS A PAGE THAT HA SHES TO: 36367763ab73783c7af284446c ...
0
votes
1answer
32 views

Hosting companies that allow hosting a laravel application on tor

Are there any hosting companies that offer tor services for hosting a laravel application. Is it even possible to host a laravel application over tor? Also, compile my laravel application and then ...
0
votes
1answer
66 views

Tor relay giving false HSDir flag

Today my tor relay started reporting the HSDir flag out of nowhere. I do not have a hidden service configured. Is this something i should worry about? Everything looks fine, and i see no services ...
1
vote
1answer
206 views

Deny a Hidden Service to communicate with servers of one country

I would like to deny my Hidden Services (HS) to speak with any servers from one country but I would like to allow other hop of my circuit to be from that country For example my HS is hosted in ...
0
votes
1answer
92 views

How do Linux global brokers

I have a Linux VPS. I need to go outside and I try to proxy export http_proxy="http://127.0.0.1:8123" export https_proxy="https://127.0.0.1:8123" But not all agents. I have an nginx that needs ...
1
vote
1answer
102 views

hide IP from webserver software and PHP

I want to setup a hidden service but I would like to hide the IP from the webserver software (nginx here) and PHP, but I'm not sure how to do it? If nginx and PHP can't know the current server IP, no ...
1
vote
1answer
627 views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1
vote
0answers
58 views

What is a private Tor network

While reading about botnets leveraging Tor hidden services for command and control I came across a term I have never seen or read about anywhere a private Tor network I tried researching this term ...
1
vote
1answer
46 views

Why do so many HS devs use PHP?

There's a lot of talk that PHP is "inherently insecure" and "great if you want your site to get hacked". I've never used PHP, so I can't make an educated opinion myself, but I am wondering why this is ...
0
votes
1answer
187 views

My tor hidden service stopped working

I have successfully hosted my first .onion site on my Raspberry Pi by following this tutorial. For some reason I needed to stop running this site for a while. So I used this command sudo /etc/init.d/...
0
votes
1answer
519 views

How do I host a wordpress blog on tor?

How do I go about hosting a wordpress blog as a hidden service? Are there providers who will host it for me? Or will I have to configure it myself?
0
votes
1answer
172 views

I have setup tor on Ubuntu 16.04 using Apache2 It works for an http site, but, I want to make it and https site.

In researching how to do this I notice that I have to purchase an ssl certificate to get it to work. Is this the only way to do this? I am running the onion server from my home computer. It is not ...
0
votes
1answer
193 views

SSL between onion and web server

I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
0
votes
1answer
64 views

Run onion service from tor browser

I was wondering if it would be possible to connect two tor browser directly. This would be great for P2P applications running in the browser. I was wondering something like one browser creating a ...
0
votes
2answers
328 views

Is there a library to make use of Tor's features programatically?

When one wants to write an application that uses some of the features of Tor in a secure manner it would be helpful if there was a library to do so. I wonder if there is a library that provides ...
0
votes
3answers
323 views

What are all the suffixes for websites exclusive to Tor, or at least should be opened only on Tor, and how do I find more?

I just started using the Tor Browser and Orbot on my smartphone and would like to find out what I can do with it. Is there a lot of different Legal and Illegal services?
2
votes
2answers
202 views

Are there hosts for hidden services?

I am exploring putting up a simple page as a hidden service advertising business formation and nominee services. Does anyone offer hosted pages? I think I don't really need an entire site, just a way ...
0
votes
1answer
57 views

ssh as hidden service - username passed in clear?

I have set up sshd on my box as a hidden service. I'm wondering if, when I torify ssh uname@xxxxxxxxxxxxx.onion is the user-name passed in the clear?
0
votes
1answer
42 views

Tor Filetransfer (FTP) for Webhoster

i'm building a hidden service hosting provider, an actually im able to run a web-/ and Mysql Server full proxied over the tor network. But im wondering how i could realize a file-transfer protocoll ...
3
votes
1answer
110 views

Does Tor still monitor “shadow” relays?

I've been researching methods to monitor hidden services for a university project. I came across this paper which talks about injecting relays as hidden service directories to gather onion addresses. ...
2
votes
1answer
116 views

Onion service and dynamic IP

I saw on Tor's FAQ that a Tor Relay can work well with a dynamic IP, I was wondering if it's the same for a service or if it would be sometimes unreachable ?
0
votes
1answer
88 views

Do Tor hidden services have human readable names and if so how does that work?

I'm learning more about the design of Tor and had thought that hidden services use names like duckduckgo.onion but apparently it's (54 character thing).onion? Do they use human readable names and if ...
0
votes
0answers
55 views

How does a user get the public key for a hidden service?

I'm reading up on the Tor design and wondering how one gets the public key for a hidden service? For example if I want the public key for DuckDuckGo's hidden service, how do I get it, and how do I ...
0
votes
0answers
27 views

My hidden web service requires calls to multiple servers. Better to differentiate by hostname or port?

I'm currently running a clearweb service accessible at https://www.mydomain.com. The site links to content, both static (e.g. images, jquery libraries), and dynamic (e.g. ajax calls) on other servers ...
0
votes
1answer
3k views

I need help viewing videos!

How does one view videos on Tor if it will not allow Flash? Is there another way? I have tried several sites, and I am not able to view any videos. What is the solution?
1
vote
2answers
97 views

Are Tor version 2 (16-char) addresses obsolete?

Could I still use a 16-char onion address for a hidden service if I am more concerned about being able to generate a nice "vanity" onion address than hiding the physical location of the service? Does ...
3
votes
2answers
195 views

Tor hidden service bandwith question

I have a newbie question here. When you setup a Tor hidden service do you yourself use up bandwidth on your network or does is the traffic attributed to the relay?
0
votes
0answers
16 views

New setup on Raspberry Pi 2B

Last time the setup failed. Can anyone tell me the steps of installation of a Tor hidden service? I have already installed Apache2 server with PHP. What to do now? Thanks for answers!