Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
1
vote
2answers
317 views

Multiple Hidden Services

Is it better to have one server that connects to Tor and connect all the hidden services to that one server, or one server connecting to Tor for each hidden service? The Tor connections will all be ...
1
vote
1answer
86 views

Do sessions still work for onion websites?

Given that many users will come out of the same exit node for any given site, do sessions still for for onion websites? ie. Will the people that come out of the same exit node be all logged in as the ...
1
vote
1answer
80 views

Tor connection comparison inquiry

I am new to Tor and I have been trying to understand its inner workings. I was wondering how many extra trips across the Internet are in a connection to Tor hidden service compared to directly ...
0
votes
1answer
150 views

Jquery and bootstrap risk for Tor Hidden service

If you make a tor hidden service which has scripts and CSS (the whole core) of bootstrap and the whole Jquery library in the server (and included in the pages). Can you deanonymize the tor hidden ...
3
votes
2answers
389 views

Marketing methods employed by Tor hidden services?

I am just curious to know about the marketing methods being employed by Tor hidden services .These .onion domain sites cannot be indexed by normal search engines like google etc nor they can be used ...
1
vote
1answer
1k views

Can I get a Let's Encrypt certificate for hidden services? [duplicate]

Is it possible to use Let's Encrypt to generate a certificate for an .onion address? From what I read, it is currently not supported, but I wonder whether there are technical reasons preventing it, ...
0
votes
1answer
333 views

How does Tor browser find hidden websites [closed]

I was reading about search engines and i have seen that google for example is crawling and expending it's indexes by finding new links inside of the current websites he is scanning at the time. So my ...
0
votes
2answers
104 views

limit tor socks server to a certain hidden service

I have tor running on a pc, with its socks server listening on localhost port 9050. I would like to limit the socks server in this way: socks requests (from clients) should be allowed only for a ...
3
votes
2answers
691 views

Sniff Tor onions address from a relay

Currently working on a Tor study, I would have a question regarding the tor hidden services. I read lot of technicals papers to better understand the tor working on this point, like these good ...
5
votes
3answers
3k views

How does “HiddenServiceAuthorizeClient” work?

Reading here I understand that only clients that are listed are authorized to access the hidden service, but how does it work? I mean, is my hidden service really hidden? If a client is not ...
0
votes
1answer
894 views

problem loading page,connection timed out [duplicate]

When i go to hidden wiki 95 percent of the websites will not open. I get a message that connection is timed out because the site took to long to respond I am new to this and I do not know what to try ...
1
vote
1answer
95 views

Backwards Compatibility on the Tor Network

How big of an issue is backwards compatibility on the Tor network? The reason I ask is that my Onion v3 hidden service is set up and ready to go, however I am unsure when to discontinue my Onion v2 ...
1
vote
1answer
226 views

Security: Can an exit node be set up with an encrypted connection to the service?

So far it seems that all exit note-to-server connections are communicated in plaintext. Is there a way to add something to a Linux or Windows server so that very last hop is encrypted? Or ...
1
vote
1answer
137 views

What happens if a rendez vous point for a single onion service is a relay that uses an old version of Tor?

What happens if a rendez vous point for a single onion service is a relay that uses an old version of Tor that doesn't support the recent single onion service feature? And if that wouldn't happen if ...
0
votes
1answer
64 views

Why use a rendez vous point instead of a introduction point?

This is maybe a obvious question but why a client need to use a rendez-vous point instead of directly use a introduction point for communicate with the hidden service? It is because introduction ...
3
votes
2answers
421 views

Are .onion addresses leak-proof?

I want to perform tasks other than web browsing over Tor, for example XMPP chat. I don't want to have to rely on a Tor implementation in the applications themselves, but I do want to avoid leaking my ...
0
votes
1answer
600 views

How do I make a Tor HSP on IIS / ASP.NET Core?

I want to run ASP.NET Core on a non Windows machine with Tor. How can I configure IIS / ASP.NET Core to publish an HSP endpoint?
20
votes
3answers
11k views

How to set up a Tor hidden service?

Seeing that I find the technical side of it extremely interesting, I want to try to set up a Tor hidden service. For this I am following the Torproject instructions. I installed Tor, have it running, ...
4
votes
3answers
3k views

What libraries exist for writing a Hidden Service in Java?

What libraries exist for programming Tor Hidden Services in Java? I am looking for a Java implementation of the Tor Rendezvous Specification that allow you to implement a service using an existing ...
0
votes
2answers
131 views

Hidden Service localisation

Gentlemen I thought something about hidden service an onion server. it's just an assumtion, i've not try ! Is it possible to locate a server ( a country, not a fixed point or public ip, but just ...
-1
votes
1answer
753 views

Stopping a DDoS attack on Tor daemon

I've already check How to protect a hidden service against DDOS attack? and How to deal with DDOS attacks? and How to mitigate layer 7 attacks on hidden services?. The problem is not DDoS of web ...
0
votes
2answers
123 views

Using Ricochet concurrently?

Is it safe to run two ricochet instances on the same system; side-by-side? Is there anything that might conflict (listening ports, etc) that could cause issues? Would you recommend against it for any ...
0
votes
1answer
331 views

How to set up a Tor hidden service and bind a ServerSocket with secure

Hello everyone.To begin with i write a Server in Java (or maybe i will use an an existing more efficient you know), to serve a Hidden Service. With a few words i configure it so that it will accept ...
1
vote
1answer
487 views

How do I generate .onion hostnames using PHP?

PHP can be used to generate a lot of addresses and private keys for use with Bitcoin. How about Tor? Can we use PHP to generate a Tor hostname?
1
vote
0answers
62 views

How does a HSDIR know which HS descriptor it has?

How does a HSDIR know which HS descriptor it has, and where is the descriptor / identity of the HS stored on the disk of the node ?
2
votes
1answer
674 views

Tor Encryption Standards

I'm looking for up-to-date information on Tor encryption standards, and I can't seem to find anything newer than 2013. What encryption algorithms does Tor use? What is the reasoning behind keeping ...
1
vote
0answers
81 views

HTTPSEverywhere bug? (forcing onions)

http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org Also "Idea 2" in this post: https://blog.torproject.org/blog/cooking-onions-names-your-onions This function of httpseverywhere no ...
2
votes
1answer
276 views

Hostname Hacking

How do I protect against this vulnerability? https://mascherari.press/dark-web-diaries-hostname-hacking/ > torify curl -H 'Host: localhost' http://myonionaddress.onion It reveals another onion ...
0
votes
0answers
157 views

Problem connection deep web site .onion white page with links [duplicate]

I have looked for my answer but I can not find and come to you... It is impossible for me to access deep web sites, I know the problem does not come from these sites. Here is what happens: when i try ...
3
votes
1answer
542 views

What does the logged Tor warning “Onion address foo requested from a port with .onion disabled” mean?

I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
1
vote
1answer
297 views

A server behind a physical Tor gateway to hide its location

Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access? In my world-...
3
votes
1answer
201 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
2
votes
1answer
4k views

Tor browser error after editing torrc file for Hidden Service OSX

#HiddenServiceDir /opt/local/var/lib/tor/hidden_service/ #HiddenServicePort 80 127.0.0.1:80 I get an error like this: Tor unexpectedly exited. This might be due to a bug in Tor itself, another ...
3
votes
1answer
1k views

How does it work - “Hidden services”?

Could somebody describe to me, like for Nooo-oo-ob, from the Start and to the complete End. My questions are: I've setup HS. My Tor client connect to the rendezvous. Is it populate full onion ...
0
votes
2answers
323 views

How many HSDir nodes are there?

This answer references the number of hidden service directories. How can I find out how many HSDir nodes there are?
1
vote
1answer
2k views

Directory Cannot be Readed: Permission Denied after update to 0.3.0 [duplicate]

My hidden service run fine when using 0.2.9.11 on Ubuntu 16.04 server. but get permission denied problem when I update it to 0.3.0.9 log: [notice] Tor 0.3.0.9 (git-100816d92ab5664d) running on Linux ...
3
votes
1answer
245 views

Hidden Service with Bootstrap 3

I was wondering if it is possible to host a hidden service and use Bootstrap (cdn or local) css. If bootstrap is to big to handle for Tor, is there any other (lightweight) css framework that would ...
5
votes
2answers
5k views

How do I replace my existing .onion hostname on a working site with a new hostname?

I just had a falling out with a programmer who originally installed my Hidden Service (xxxxxxxxxxxxxxxx.onion) hostname onto a Debian linux cloudhost. I know it is basically changing my entire Domain ...
2
votes
0answers
229 views

Hidden Service on Qubes Whonix, can not access Onion site from browser

I am trying to set up a hidden service on Qubes on the gateway with the server on a workstation. I followed the Whonix guide and checked to ensure the configuration was valid and that I could get the ...
0
votes
2answers
1k views

Decrease number of hidden service hops?

Is there any way to reduce the length of a hidden service's path to the rendezvous point? Bob's hidden service <---> Introduction Point Alice <---> Introduction Point tell Bob to contact ...
1
vote
0answers
586 views

How to host multiple hidden services with XAMPP or Apache?

Ok, so my operating system is Windows 8, Vidalia Tor Browser Bundle Control, and XAMPP server. I have done the following steps with no success at getting more than one service running, and many times ...
2
votes
1answer
1k views

Why does my relay have the HSDir flag when I don't host any hidden services?

i think hidden services are the dark nets inside the TOR network. I am not hosting any web servers. Then how my OR is flagged as HSDir?
0
votes
2answers
122 views

New hidden service want exposure

I just started a new hidden service on tor and I just wanted to ask what's the best way to ensure that people know it exists???
1
vote
1answer
373 views

Tor browser limit download data to 657MB

Good day I usually download files from the Internet, and I have this 700MB rar file I really need to download. But every time I download the file on Tor browser, it mysteriously stops at 657 MB, ...
1
vote
1answer
5k views

Tor.service boot errors?

"HiddenServicePort with no preceding HiddenServiceDir directive" errors from my syslog after updating to tor v2.8.6.1 in ubuntu 16 and rebooting: [notice] Tor v0.2.8.6 (git-2c0d81c26eefc1f6) running ...
1
vote
1answer
328 views

Hidden tor exit nodes

I was wondering can I run an hidden exit note that only few people know of it, somehow hidden from others? If not can I protect it via password or something so nobody else can access it? Or instead ...
3
votes
2answers
348 views

Tor domain name

When will the domain name contain more than 16 characters that are in base 32? (or when will it change from base 32 to base x?) Is it still "worth it" to spend time and processing power to generate a ...
1
vote
0answers
212 views

My hidden service fails to load as long as the Tor Browser is open on the same host

I use my hidden service as a way to access my home computer from my phone securely and regardless of any IP changes. Today, I installed the Tor Browser. After I launched it, the hidden service became ...
25
votes
2answers
2k views

How strong is the anonymity of a hidden service compared to an average Tor client? How much easier is it to learn the Hidden Service's IP address?

Another way of putting this: How hard would it be to de-anonymize a hidden service? By "de-anonymize" I mean revealing the IP address of whatever server the hidden service is hosted on. Of course, ...
2
votes
1answer
464 views

Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation? [closed]

In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that ...