Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

125 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
13
votes
0answers
4k views

How to protect a hidden service against DDOS attack?

How to protect a hidden service against DDOS attack? I did some research and found that it is possible to do load balancing with HAProxy. Is there any other solution that could be implemented?
4
votes
0answers
63 views

Tor hiden service ratelimits

While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
3
votes
1answer
424 views

What are the requirements for onion v3 sites?

What is requirements for Onion v3 sites? Greetings to the experts! I'm not can open any v3-sites (htt_://56characters.onion), but only v2-sites (htt_://16characters.onion) My noob brother must do ...
3
votes
1answer
64 views

Migrating a service from its v2 address to a new v3 one

I'm running a bitcoin node behind a v2 onion address. I'd like to migrate its traffic to a different, v3 address. Is there a way that my peers can be notified of such a change so they learn that ...
3
votes
0answers
473 views

'Web Audio API is not supported in this browser' error as a part of WebGL build

I'm trying to open a WebGL build with an integrated audio in it, basically a WebGL Unity build. I am using 9.5 alpha release as the latest stable version doesn't allow wasm anyhow but now even though ...
3
votes
1answer
1k views

How to use HAProxy/OnionBalance to create a high availability load balancer for tor hidden service?

I have gone through this question SO but the solution suggested as OnionBalance or other HAProxy options will result in a single point of failure - either the loadbalancer or else the server running ...
3
votes
0answers
380 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
3
votes
1answer
6k views

How to open a .onion site?

I heard of the Tor browser from friend and downloaded it. I'm curious to see what exists on the .onion sites but all the ones I tried shows me an error message telling me that there is a connection ...
2
votes
0answers
107 views

What is a private Tor network

While reading about botnets leveraging Tor hidden services for command and control I came across a term I have never seen or read about anywhere a private Tor network I tried researching this term ...
2
votes
0answers
262 views

Hidden Service on Qubes Whonix, can not access Onion site from browser

I am trying to set up a hidden service on Qubes on the gateway with the server on a workstation. I followed the Whonix guide and checked to ensure the configuration was valid and that I could get the ...
2
votes
0answers
1k views

Troubleshooting ssh over tor connection

I've tried to set up the use of ssh via tor. /etc/tor/torrc: [...] HiddenServiceDir /var/lib/tor/sshd HiddenServicePort 443 127.0.0.1:443 /var/lib/tor/sshd has the hostname and private_key after ...
2
votes
2answers
681 views

Does nginx need any additional configuration to run a hidden service safely?

I know that nginx is much safer than Apache for hidden services, but is there any additional configuration that needs/should/is recommended to be done to run a hidden service safely?
2
votes
0answers
256 views

Not able to register/login facebook hidden service with Javascript enabled

I'm trying to use facebook's hidden service to create an pseudonymous facebook account. For registering or logging in to facebook you have to enable javascript and I did that by clicking on the ...
2
votes
0answers
676 views

Tor unexpectedly exits

I tried to start a hidden service on mac with MAMP and tor browser. I added the line HiddenServiceDir /Users/Gary/Desktop/tor_site HiddenServicePort 4023 127.0.0.1:4023 into my torrc file in ...
2
votes
0answers
224 views

How do overlay network nodes communicate without IP addresses?

I've been reading about how Tor and I2P use cryptographic addresses to send messages to other nodes, but how does this work? I looked through the documentation for each and neither is very clear on ...
2
votes
0answers
1k views

Issues setting up hidden service on Android

I am trying to setup a hidden service on an android device but cannot seem to get it to work. I have installed Palapa server and the website is available on localhost as well as over my network (for ...
2
votes
0answers
818 views

Cannot connect to hidden services

In the past few days, I faced a problem that never occurred to me before: when trying to access .onion sites, the page times out after trying to connect. This is what it says: Unable to connect ...
2
votes
0answers
2k views

Tor Secret Key isn't working on local host server

I'm new to Tor, and so far I've managed to get public & secret keys. But when I try to run my public key on my Tor browser, it says "Unable to Connect" and the sub-line is "Firefox can't establish ...
2
votes
0answers
1k views

facebookcorewwwi problems on Tor

I am trying to access https://facebookcorewwwi.onion/ but it fails after login on https://facebookcorewwwi.onion/checkpoint/?next with the error message Sorry, something went wrong Please try ...
2
votes
0answers
98 views

Web of trust for Hidden Services keys

Is it possible right now, with the current version of Tor, to use a distributed web of trust in Hidden Sevices' public keys, meaning: Public keys are uploaded to public keyservers Users can search ...
2
votes
1answer
2k views

Problems with opening certain .onion websites

I'm hunting for nice cannabis strains but when I use .onion website links with Tor program, only a few of them open up but everything that has better reviews and products (for example, DeepWeb, ...
1
vote
1answer
40 views
+50

Put Ed25519 keys in usable file format for Tor

I'm making an onion (v3) address generator in Python. Here is the part that generates the keypair: from cryptography.hazmat.primitives import serialization from cryptography.hazmat.primitives....
1
vote
0answers
50 views

Connection not secure warning when connecting to .onion domain with Tor Browser

I have self-hosted Discourse based forum, available over .onion domain only (Hidden Service Version 3). Everything works as expected, however when I connect to the forum with an up to date version of ...
1
vote
0answers
81 views

How do onion services host anonymous chatrooms and what level of anonymity is present when using one?

There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
1
vote
0answers
47 views

Run .onion services in a tor relay

Tor Project says that running a hidden service in a relay can deanonymize the service. But is it ok to run a onion service if i don't care if the server is anonymous (i only want the users to be ...
1
vote
1answer
96 views

Hidden Service Behind a Bridge

Without a bridge, my hidden service is accessible for others. But when I use a tor bridge, this hidden service is not accessible. My torrc is: UseBridges 1 Bridge obfs4 my_bridge_ip:my_bridge_port ...
1
vote
0answers
23 views

How does a Tor client find the correct HSDir to connect to when fetching a "descriptor" of a hidden service?

It seems that a Tor client connects to a HSDir through a circuit of 3 Tor nodes when retrieving a hidden service descriptor. But to access a hidden service, a user only needs to know the .onion ...
1
vote
0answers
1k views

hidden service + reverse proxy not working

i'm trying to set up a hidden service for an existing webserver that is behind a reverse proxy and i'm unable to get it work. i had no problems creating hidden services on servers with no reverse ...
1
vote
0answers
100 views

Whonix hidden service

I'm playing around with whonix and hidden services. I've followed this tutorial (except Step 3: Configure Onion Services Authentication) https://www.whonix.org/wiki/Onion_Services#Hidden_Webserver ...
1
vote
0answers
58 views

Tor process gets jammed, hidden services won't resolve

I'm dealing with a situation here. I'm attempting to run a webserver over a few hidden services. I've set up my torrc file to contain a few hidden services. And then run just well. But then after a ...
1
vote
0answers
25 views

What happens in case of temporary HS guard unavailability?

In my Tor testing environment I noticed that if a HS guard node is unavailable, it is not immediately replaced by using another guard. I know that entry guards are changed after months (6-9?) but I ...
1
vote
0answers
110 views

How do you access Blockchain's tor hidden service?

I'm trying to access Blockchain's tor hidden service on tor in order to make a wallet over tor, but everytime I try to access the onion link they give me on blockchain's website, it always times out. ...
1
vote
2answers
1k views

Can't host my own hidden service

I use lighttpd, i can access localhost with Firefox, use port 9000, I modified my torrc with this port; HiddenServiceDir /var/lib/tor/hidden_service/ HiddenServicePort 80 127.0.0.1:9000 Reload, ...
1
vote
1answer
287 views

hidden_services only works with invalid permissions

When I try to start tor with invalid permission, I get the following error: $ ./start-tor.sh [sudo] password for user: Oct 08 18:20:32.210 [notice] Tor 0.4.0.5 running on Linux with Libevent 2.0.21-...
1
vote
1answer
409 views

TOR Hidden Service: IP anonymity

Suppose that a Tor client wants to access a certain hidden service. According to the protocol, instead of submitting a request directly to the server IP (which is hidden[1][2]), this client submit a ...
1
vote
3answers
243 views

making request onion sites without tor

I made a simple server at my home hosted by tor. The server contains my personal files and i dont like paying services for hosting websites because hosting on tor is free and hidden. It doesn't matter ...
1
vote
2answers
508 views

Are Tor version 2 (16-char) addresses obsolete?

Could I still use a 16-char onion address for a hidden service if I am more concerned about being able to generate a nice "vanity" onion address than hiding the physical location of the service? Does ...
1
vote
0answers
210 views

Connect to TOR serivce to upload files FTP/SFTP

I would like to upload some files to my .onion website over FTP/SFTP securely however I cannot figure how to connect. Any help? I have added the following to /etc/tor/torrc: HiddenServiceDir /var/...
1
vote
1answer
76 views

Why do so many HS devs use PHP?

There's a lot of talk that PHP is "inherently insecure" and "great if you want your site to get hacked". I've never used PHP, so I can't make an educated opinion myself, but I am wondering why this is ...
1
vote
1answer
203 views

hide IP from webserver software and PHP

I want to setup a hidden service but I would like to hide the IP from the webserver software (nginx here) and PHP, but I'm not sure how to do it? If nginx and PHP can't know the current server IP, no ...
1
vote
0answers
544 views

Unable to connect to localhost or 127.0.0.1

I am trying to setup onion hidden service and i am using xampp default apache web server. I setup everything correctly and got my hostname and private key but the main problem i am getting is that i ...
1
vote
1answer
983 views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1
vote
1answer
242 views

Deny a Hidden Service to communicate with servers of one country

I would like to deny my Hidden Services (HS) to speak with any servers from one country but I would like to allow other hop of my circuit to be from that country For example my HS is hosted in ...
1
vote
0answers
73 views

How does a HSDIR know which HS descriptor it has?

How does a HSDIR know which HS descriptor it has, and where is the descriptor / identity of the HS stored on the disk of the node ?
1
vote
0answers
89 views

HTTPSEverywhere bug? (forcing onions)

http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org Also "Idea 2" in this post: https://blog.torproject.org/blog/cooking-onions-names-your-onions This function of httpseverywhere no ...
1
vote
0answers
338 views

My hidden service fails to load as long as the Tor Browser is open on the same host

I use my hidden service as a way to access my home computer from my phone securely and regardless of any IP changes. Today, I installed the Tor Browser. After I launched it, the hidden service became ...
1
vote
0answers
195 views

Hidden service not accessible after configuring transparent proxy

I am configuring a transparent proxy on my server using the instructions given here https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy Everything is fine, I make required changes to ...
1
vote
1answer
503 views

Tor hidden service configured for high load

I am using CentOS and Tor v0.2.7.6 (compiled from source). Nginx is used as a HTTPS proxy and listens to 127.0.0.1:443. I have configured one hidden service. It redirects incoming data to nginx. ...
1
vote
0answers
913 views

How to host multiple hidden services with XAMPP or Apache?

Ok, so my operating system is Windows 8, Vidalia Tor Browser Bundle Control, and XAMPP server. I have done the following steps with no success at getting more than one service running, and many times ...
1
vote
0answers
411 views

How to change orbot android hidden service address?

I'm trying to get a new onion address for my hidden service on Orbot. The problem is it does not auto generate a hostname. How can I force this app to do so?