Skip to main content
7 votes

Looking to create a onion domain; need some help

How-to: Quoting hiddenwiki: Getting a .onion domain is not only free (they are automatically generated by Tor), but it is simple once you have completed the basic server installation procedure. If ...
NeverMine17's user avatar
6 votes

Understanding the tor circuit

You build a TLS connection to your guard. Over that TLS connection you perform a key exchange using the OR protocol. Now you and the first guard compute two keys from the shared secret the key ...
cacahuatl's user avatar
  • 11k
6 votes

Why doesn't torproject.org have an official onion address?

Actually, there is an onion address for Tor: http://expyuzz4wqqyqhjn.onion/ The Tor Project runs quite a few onion addresses: https://onion.torproject.org/ I can't confirm if the Tor Browser uses ...
SuperSluether's user avatar
5 votes

sending email through .onion

It depends, there are a few scenarios. Internal mail, from: [email protected] to: [email protected] or from: [email protected] to: [email protected] The email never leaves the foo.com server(s), there's no way to ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

How can Facebook's Tor Onion be constantly accessible with the massive bandwidth demand?

First of all to entirely deny service to an onion service you'd need to take 6 positions in the hidden service directories hashring constantly. You need to generate long term identity keys for all 6 ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

How does Tor use application proxy (SOCKS)?

The "Onion Proxy" is a name for a Tor client, it is the entire client process. The SOCKS interface is just a way for a client to utilise the onion proxy. The SOCKS server is provided by the Tor ...
cacahuatl's user avatar
  • 11k
3 votes

How can i nginx reverse proxy to .onion site ? which is on TOR network?

You need a polipo proxy - because Tor is not a http proxy, it's a Socks one. You can get it on polipo's official website and don't be upset that it's no longer maintained: this is the case when "the ...
Alexey Vesnin's user avatar
  • 6,265
3 votes

Restarting a tor relay. Does it go back to phase one?

No. Your relay will lose some of its flags if it's offline for a period of time, but simply restarting doesn't seem to affect its consensus status. I'm not sure if the consensus deteriorates if your ...
SuperSluether's user avatar
3 votes
Accepted

What is passed to the Onion Proxy in terms of the OSI model?

The SOCKS proxy operates on the application layer. Therefore the answers to your questions are: The SOCKS proxy receives whatever you send to it via the TCP connection that is built up to the SOCKS ...
segfault's user avatar
3 votes
Accepted

Finding all onion addresses

Tor directory authorities don't keep onion addresses. It is Hidden Service Directory which keeps descriptors for currently running onion services. As they are responsible for holding descriptors, ...
defalt's user avatar
  • 205
3 votes
Accepted

Do Tor relays require knowledge of the real IP address of a hidden service, to enable routing to it?

defalt answered your question in a nutshell. The solution Tor uses to hide your IP address, and nevertheless allows you to host a hidden service, is that it is the host of the hidden service that ...
entrop-x's user avatar
  • 146
2 votes

Is it possible to find a Tor page based on the 512-bit hash?

I placed 36367763ab73783c7af284446c59466b4cd653239a311cb7116d4618dee09a8425893dc7500b464fdaf1672d7bef5e891c6e2274568926a49fb4f45132c2a8b4 into DDG and came across md5hashing.net. Which when I ...
user13596's user avatar
2 votes

Implementing the tor protocol, based on tor sources and a few clarifications

Step 7 is a TLS socket, not just raw TCP. "I created the onion hidden service, and i want to try make a http request to it", there are additional steps required for onion services which you'll know ...
cacahuatl's user avatar
  • 11k
2 votes

Malicious hidden service directories

Quick synopsis This is oldish research that was presented about a year ago by Filippo Valsorda and George Tankersley at HITB. Sophos are an anti-virus company. They have a product to sell and the ...
cacahuatl's user avatar
  • 11k
2 votes

Using .onions to forward to public .com

Technically, NO - in the abstract common case. In 80%+ cases setting up a Nginx reverse proxy will do the trick, but sites can be complicated, and they can use a wide set of subdomains and/or other ...
Alexey Vesnin's user avatar
  • 6,265
2 votes
Accepted

When using Tor, will different tabs follow different pathways?

In Tor Browser, isolation is performed by the first party domain. So, if tab A is for bob.com as the domain and tab B is for dave.com, they will use distinct circuits. However, if tab A and tab B are ...
cacahuatl's user avatar
  • 11k
2 votes

How often does a Tor change rendezvous point with hidden service?

Do you change rendezvous points and repeat this whole process every time you switch to a different page, even on the same hidden service? No, the rendezvous point is used to establish a circuit, over ...
cacahuatl's user avatar
  • 11k
2 votes
Accepted

Pre Tor software for MacOS (not OSX)

It's called JAP/Java Anonymizing Proxy otherwise known as JonDoNym. In 2003 the network operators were compelled by the German Federal Bureau of Criminal Investigation to log mixes within the network ...
Alexey Vesnin's user avatar
  • 6,265
2 votes
Accepted

Can a HSDir see visited onion url's?

Yes, currently HSDirs can see the looked up .onion hostname. This does not include the full URL but just the .onion hostname. Proposal 224 (ticket #12424) will fix this issue. See also #8106. If you ...
Peter Gerber's user avatar
  • 1,342
2 votes

What happens when you add a .to or .direct or .city to an onion link?

Those are all Tor2web proxies and your first thought should be to not use them. You first thought should be to use Tor Browser when you want to access onion services. The contents of the following ...
pastly's user avatar
  • 532
2 votes

How is connecting to clearnet sites diffrent than connecting to .onion sites?

Connections to clearnet sites have to go through exit relays. While it is wrong for them to do this and they'll get removed from the network when caught, exit relays are in a position to log and ...
pastly's user avatar
  • 532
2 votes
Accepted

Relay cell size moving backward

The current implementation of Tor does not use any padding in its circuit crypto. Different from the original OR paper, Tor later switched to a "telescoping" circuit building approach, with RELAY ...
nobody's user avatar
  • 725
2 votes

Drawing a blank

To quote Steve's comment, which is actually a good answer: Tor itself doesn’t have names, passwords, or PINs. To access an onion site, just open the Tor Browser and type in the onion address. You ...
unixandria's user avatar
2 votes

Onion service and dynamic IP

TLDR; It is the same for a service, as long as your server is connected to the tor network. To make it short, when you set up your hidden service, it will pick 3 (by default) introduction relays, and ...
Wrotcod's user avatar
  • 21
2 votes

Why are entry nodes allowed to know that they are entry nodes?

The network doesn't make the distinction of entry relays. Any Tor client is allowed to use any relay for any hop of the circuit (except with restrictions on the exit relay). To limit the types of ...
Steve's user avatar
  • 3,142
2 votes

Tor Search Engine? is there any Tor2web search engines in clearnet?

I prefer Bullmask search engine. Personally I'm using this tor search engine for tor2web. This site has a neat interface and those onion results are like google SERP. Also, you don't need tor browser ...
martin robert's user avatar
2 votes
Accepted

What is the key blinding function used in the hidden service protocol v3?

I've messaged one of the tor developpers and he's been kind enough to answer. In the rend-spec-v3.txt document, the function is actually specified in appendix A2. And the "HSDirV3" flag ...
mega_tarsus's user avatar
2 votes

What programming languages are used to build tor hidden webpages (dark web webpages)

Great Questions! It's awesome that you're curious about protecting your identity and what you do on the web! After all, it should be nobody elses business but your own. Congratulations! I take issue ...
Gregbert's user avatar
2 votes

Month-long bitcoin subscription on .onion sites: How are returning subscribers identified each day?

If no login/password is implemented in any form, then it is 100% scam.
Lt. Dan's user avatar
  • 41
2 votes

Does the Tor browser save cached versions of .onion sites to computer?

The Tor Browser is designed to avoid writing any sensitive data to disk unless the user changes the default settings to enable a feature that does record sensitive data. So with the default settings, ...
Steve's user avatar
  • 3,142

Only top scored, non community-wiki answers of a minimum length are eligible