Questions tagged [hidden-services]

Questions relating to Tor Hidden Services

Filter by
Sorted by
Tagged with
0
votes
1answer
368 views

How to set up a Tor hidden service and bind a ServerSocket with secure

Hello everyone.To begin with i write a Server in Java (or maybe i will use an an existing more efficient you know), to serve a Hidden Service. With a few words i configure it so that it will accept ...
0
votes
1answer
667 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
0
votes
1answer
169 views

Why not to add tor2web-like gateways to relays by default?

as it is said in this article https://blog.torproject.org/facebook-hidden-services-and-https-certs whatever it is you think Tor is for, I guarantee there's a person out there who uses it for ...
0
votes
2answers
137 views

Using Ricochet concurrently?

Is it safe to run two ricochet instances on the same system; side-by-side? Is there anything that might conflict (listening ports, etc) that could cause issues? Would you recommend against it for any ...
1
vote
0answers
68 views

How does a HSDIR know which HS descriptor it has?

How does a HSDIR know which HS descriptor it has, and where is the descriptor / identity of the HS stored on the disk of the node ?
1
vote
0answers
82 views

HTTPSEverywhere bug? (forcing onions)

http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org Also "Idea 2" in this post: https://blog.torproject.org/blog/cooking-onions-names-your-onions This function of httpseverywhere no ...
2
votes
1answer
293 views

Hostname Hacking

How do I protect against this vulnerability? https://mascherari.press/dark-web-diaries-hostname-hacking/ > torify curl -H 'Host: localhost' http://myonionaddress.onion It reveals another onion ...
0
votes
0answers
200 views

Problem connection deep web site .onion white page with links [duplicate]

I have looked for my answer but I can not find and come to you... It is impossible for me to access deep web sites, I know the problem does not come from these sites. Here is what happens: when i try ...
3
votes
1answer
631 views

What does the logged Tor warning “Onion address foo requested from a port with .onion disabled” mean?

I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
3
votes
2answers
453 views

Is it possible for an ISP to distinguish between traffic from a relay and traffic from a hidden serivce?

If an ISP was performing deep packet inspection on a server's traffic, would they be able to tell the difference between a hidden service and a relay? To clarify, I'm talking about a "middle relay" - ...
3
votes
1answer
219 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
1
vote
1answer
327 views

A server behind a physical Tor gateway to hide its location

Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access? In my world-...
1
vote
1answer
3k views

Directory Cannot be Readed: Permission Denied after update to 0.3.0 [duplicate]

My hidden service run fine when using 0.2.9.11 on Ubuntu 16.04 server. but get permission denied problem when I update it to 0.3.0.9 log: [notice] Tor 0.3.0.9 (git-100816d92ab5664d) running on Linux ...
2
votes
0answers
240 views

Hidden Service on Qubes Whonix, can not access Onion site from browser

I am trying to set up a hidden service on Qubes on the gateway with the server on a workstation. I followed the Whonix guide and checked to ensure the configuration was valid and that I could get the ...
3
votes
1answer
268 views

Hidden Service with Bootstrap 3

I was wondering if it is possible to host a hidden service and use Bootstrap (cdn or local) css. If bootstrap is to big to handle for Tor, is there any other (lightweight) css framework that would ...
1
vote
1answer
396 views

Why do I see the hidden service directory in my browser?

I configured Tor to set up a hidden service in "c:\webserver\www\hidden_service". When I start Tor Browser, it creates the directory "hidden_service" and the hostname and public_key files inside of it....
0
votes
2answers
129 views

New hidden service want exposure

I just started a new hidden service on tor and I just wanted to ask what's the best way to ensure that people know it exists???
4
votes
1answer
1k views

Access .Onion links using programs other than Tor Browser? (VLC, etc)

How would I be able to access a tor hidden service without the use of TBB? For example, an RTMP server hosted through Tor. In this scenario, I'd like to access the RTMP server using VLC, but VLC would ...
1
vote
1answer
346 views

Hidden tor exit nodes

I was wondering can I run an hidden exit note that only few people know of it, somehow hidden from others? If not can I protect it via password or something so nobody else can access it? Or instead ...
0
votes
1answer
202 views

SSL between onion and web server

I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
3
votes
2answers
356 views

Tor domain name

When will the domain name contain more than 16 characters that are in base 32? (or when will it change from base 32 to base x?) Is it still "worth it" to spend time and processing power to generate a ...
3
votes
2answers
459 views

Are .onion addresses leak-proof?

I want to perform tasks other than web browsing over Tor, for example XMPP chat. I don't want to have to rely on a Tor implementation in the applications themselves, but I do want to avoid leaking my ...
1
vote
0answers
241 views

My hidden service fails to load as long as the Tor Browser is open on the same host

I use my hidden service as a way to access my home computer from my phone securely and regardless of any IP changes. Today, I installed the Tor Browser. After I launched it, the hidden service became ...
2
votes
1answer
508 views

Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation? [closed]

In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that ...
3
votes
1answer
719 views

Fetching v2 rendezvous descriptor failed. Retrying at another directory

My system tor version 0.2.9.10 (on Ubuntu 16.04) is outputing a lot of the following warnings: Fetching v2 rendezvous descriptor failed. Retrying at another directory. Is there some way to fix it? ...
1
vote
0answers
52 views

Is there a way to download “hidden service descriptors” (from Windows)? [duplicate]

Before continuing, I have to say that I have read this thread ("Retrieving hidden service descriptors") and it has not solved the problem. I am doing extensive university work on Tor, and I would ...
0
votes
1answer
708 views

Tor and Exit nodes - just a question

Given the fact that exit nodes seem to be implicated with just about every bad story covering Tor - why have them? Could not the clearweb be left to just continue it's evolution into a corporate ...
0
votes
1answer
647 views

Problems setting up a “Single Onion Service”

I'm doing some Tor tests, and I want to set up a "Single Onion Service". However, when I try to set it, Tor Browser crashes when starts (the exact error is: "Tor exited during startup. This might be ...
1
vote
1answer
151 views

Can a HSDir see visited onion url's? [duplicate]

Is it possible that a HSDir can see visited onion urls? If I make a onion website and my friend visits it could there be a way that someone can capture the url he used? (the .onion url).
1
vote
2answers
141 views

Are hidden services portable?

I understand hidden services and am planning to configure one on my laptop. I was just wondering, if I create a hidden service on my laptop at home will the hidden service still work with the same ...
2
votes
0answers
328 views

HiddenServiceAuthorizeClient: Difference between 'basic' and 'stealth'? [duplicate]

http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html#HiddenServiceAuthorizeClient The auth-type can either be 'basic' for a general-purpose authorization protocol or 'stealth' for a less scalable ...
1
vote
1answer
418 views

Tor browser limit download data to 657MB

Good day I usually download files from the Internet, and I have this 700MB rar file I really need to download. But every time I download the file on Tor browser, it mysteriously stops at 657 MB, ...
3
votes
1answer
731 views

How can Facebook's Tor Onion be constantly accessible with the massive bandwidth demand?

Background: (you can skip if you already know the details of Facebook's Hidden Service) In 2014, Facebook unveiled their Tor Hidden Service that let people from restricting governments access Facebook ...
2
votes
1answer
188 views

Does Tor prevent people from finding the sites you visited before dowloading Tor, or does it only block your history after downloading Tor?

The title is my question--does Tor block access to your internet browsing history before you download Tor, or does it block access to your internet use after downloading Tor?
2
votes
1answer
2k views

What does your router see/log when visiting a tor hidden site address?

If I visit http://expyuzz4wqqyqhjn.onion/ through Tor Browser, does my router see that address or does it only see the first relay Tor Browser connects to? Does it see anything different when visiting ...
0
votes
1answer
930 views

Tor keeps timing out when I try to access websites [duplicate]

I am having a bit of trouble getting this to work. Can anyone help me resolve this problem? 3/17/2017 17:41:53 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network ...
0
votes
1answer
2k views

Possible to scrape .onion sites?

Has anyone successfully scraped/mirrored a site which is offered as a Tor Onion Service? If so, how did you manage? I've been researching this for a few days, and come up empty handed.
1
vote
1answer
386 views

Do tor sites have to end in .onion?

Every hidden service I've been to ends .onion, but I haven't any technical explanation as to why that is. I've also never found any information regarding whether or not it is possible to host a ...
1
vote
1answer
544 views

Registering .onion with Certificate Authority?

Is it possible to register my onion with LetsEncrypt? I'm using Arch. If no, why not? Thanks!
0
votes
2answers
470 views

TOR BUG,Tor dropping SSH tunnel to hidden SSH service

I have multiple hidden services which are SSH servers. They do give unstable connections, and drop out all the time (after a couple seconds). Sometimes with a SOCKS error 1 or with packet_write_wait:...
0
votes
1answer
715 views

Orbot Apps VPN Mode - data leakage?

Given an app configured to use Orbot's Apps VPN Mode, I am trying to determine how the VPN works. Most of the app's traffic is sent directly to a Tor hidden service the user controls, but some pieces ...
1
vote
1answer
1k views

How to deal with DDOS attacks?

This post was not helpful: How to protect a hidden service against DDOS attack? My onion keeps getting hit with denial of service attacks. Is there anything I can do to minimize the effects? POST ...
0
votes
1answer
281 views

How does NAT punching in Tor work? [duplicate]

When a Tor hidden service is implemented it publishes an introductory point. To my current understanding, connections to the said hidden service is highly dependant on this introductory point. Is ...
0
votes
2answers
158 views

If I go to a single onion service will the Tor Button notice the difference?

If I go to a standard onion service Tor button shows me, Me <-> Guard (IP) <-> Middle (IP) <-> Exit (IP) <-> relay (without giving the IP) <-> relay <-> relay <-> onion service ...
0
votes
1answer
373 views

Can I add hidden services to an existing traditional web server?

I have several virtual hosts on traditional Nginx and Apache servers. They listen on ports 80 & 443. I would like to also make those sites available as hidden services (e.g. "This site is also ...
1
vote
1answer
140 views

What happens if a rendez vous point for a single onion service is a relay that uses an old version of Tor?

What happens if a rendez vous point for a single onion service is a relay that uses an old version of Tor that doesn't support the recent single onion service feature? And if that wouldn't happen if ...
0
votes
1answer
272 views

How can I automatically redirect visitors of my site to its onion version if they're Tor users?

How can I automatically redirect visitors of my website to its onion version if I detect that they're Tor users?
0
votes
1answer
73 views

What's new in Tor 0.2.9.8?

This is a really exciting update. https://blog.torproject.org/blog/whats-new-tor-0298 According to the tor devs and the image in the article "Service side loses anonymity". But is this entirely ...
0
votes
1answer
167 views

Hidden services : clear text, or not, at the rendez-vous point? [duplicate]

Most common descriptions, including nice looking graphics, of the communication with Tor hidden services are framed in terms of high-level "Tor circuits" which obscure rather than help understand the ...
6
votes
3answers
3k views

How does “HiddenServiceAuthorizeClient” work?

Reading here I understand that only clients that are listed are authorized to access the hidden service, but how does it work? I mean, is my hidden service really hidden? If a client is not ...