We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
4
votes
1answer
153 views

Is TorBirdy also securing requests by Thunderbird to PGP keyservers?

I use Icedove/Thunderbird on Debian together with TorBirdy. And it works very well. Now I created a new keypair and uploaded it to a keyserver and asked myself if TorBirdy is taking care of this ...
9
votes
4answers
3k views

Is it possible to run a secure email network using SMTP over Tor?

I have thought about some of the security issues inherent in email. For example that even if the body is encrypted the headers are plain text so metadata is available. I was wondering if this could ...
4
votes
1answer
3k views

Tor hidden service on Raspberry Pi

I want to set up a Tor hidden service on a Raspberry Pi. What is a good way to do that? Maybe start with Occidentalis v0.2 by Adafruit? Is there a special tutorial for the Raspberry PI?
15
votes
3answers
1k views

Register .onion as gTLD?

For some weeks in 2012, "arbitrary" gTLDs could be applied for at ICANN: On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 ...
6
votes
1answer
605 views

How are Hidden Service Locations Protected From Exit Nodes?

What is to prevent exit nodes from seeing the location of servers hosting Tor hidden services?
11
votes
3answers
864 views

How to programmatically detect a hidden service

Is there some magical way which I can programmatically detect whether a hidden service exists, is up, or is dead, other than trying to connect to it through the Tor socks protocol? I can connect ...
4
votes
2answers
373 views

Can Tor connections between hidden services be aggregated using ifenslave? (… and might Mevade be doing this?)

Using ifenslave on two endpoint Linux servers, it's possible to aggregate (aka bond or team) multiple tun or tap interfaces (e.g., tun0, tun1, ...) into a single link, combining bandwidth (less ...
10
votes
1answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
7
votes
4answers
641 views

Freenet distributed hosting model: Could it be ported to Tor?

I've always wondered why Tor uses a server-based model of content storage rather than a Freenet-style, distributed, encrypted, plausible-denial model. It seems that it would be much more robust and ...
5
votes
4answers
8k views

Is there any bridge beetwen Tor and Freenet? Is there way to bridge Freenet site like a Tor hidden service?

Is there any bridge beetwen Tor and Freenet? Is there a way to bridge Freenet site like a Tor hidden service ( onion domain )? E.g. setting up site in Freenet network means, that this site splitted ...
20
votes
3answers
11k views

How to set up a Tor hidden service?

Seeing that I find the technical side of it extremely interesting, I want to try to set up a Tor hidden service. For this I am following the Torproject instructions. I installed Tor, have it running, ...
15
votes
3answers
2k views

Is it known if Tor communication deanonymization played role in Ross Ulbricht arrestment and Silk Road store takedown?

On October 2, 2013 Ross William Ulbricht was identified by FBI as the Silk Road black market website owner and was arrested. Silk Road was operated as a hidden service on the Tor network. See also: ...
9
votes
2answers
786 views

Could I run the hidden service software(e.g webserver) in a different system than the one Tor is running?

Running a hidden service in a secure way can be a really complicated matter. Ideally the system where the hidden service software (e.g. a web server) lives should not have a publicly routable IP ...
20
votes
1answer
7k views

Is it possible to look up the public key for a .onion-address?

I know .onion addresses are a (partial) hash of a descriptor which contains a public RSA key, so I was wondering: it is possible to see the public key that is found when connecting to a .onion hidden ...
12
votes
2answers
5k views

How to use Hidden Service Authentication?

How can Hidden Service Authentication be used? I never saw documentation about that anywhere.
1
vote
1answer
221 views

What events led to Freedom Hosting going down? [closed]

Freedom Hosting was one of the largest .onion website hosts until it suddenly started serving malicious code, and eventually went offline (presumably permanently). What was the sequence of events ...
3
votes
2answers
183 views

What are the threat differences to accessing hidden services compared to the regular internet over Tor?

I understand many of the possible attacks against a user visiting a regular website over Tor but I am wondering, what are the potential attacks to identify a connection between a user and a hidden ...
15
votes
3answers
2k views

Can government agencies track what sites I'm visiting when using Tor?

Can agencies such as the NSA or GCHQ track what websites I'm visiting if I'm using the Tor Browser Bundle? What about hidden services?
23
votes
5answers
9k views

Securely hosting a Tor hidden service/site

There are some detailed instructions for setting up a Tor site at torproject.org1. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that ...
26
votes
2answers
2k views

How strong is the anonymity of a hidden service compared to an average Tor client? How much easier is it to learn the Hidden Service's IP address?

Another way of putting this: How hard would it be to de-anonymize a hidden service? By "de-anonymize" I mean revealing the IP address of whatever server the hidden service is hosted on. Of course, ...
37
votes
6answers
5k views

Can a hidden service be hosted by multiple instances of Tor?

Is it possible for multiple Tor clients, running on different machines or even networks, to publish the same Tor hidden service using the same private key to load balance requests between them?
18
votes
2answers
3k views

How do Hidden Services get .onion domains that aren't random?

Hidden Services usually have a long-ish string of alphanumeric characters for their .onion address, and this is generated by Tor as part of the Hidden Service Configuration. How did some Hidden ...
21
votes
1answer
674 views

What are the implications of a Relay hosting a Hidden Service?

Are there any implications if whilst running a non-exit relay, I also use the same machine to host a Hidden Service? Specifically: How will this affect the anonymity of the Hidden Service (in terms ...