Skip to main content
6 votes
Accepted

Are .onion addresses leak-proof?

No, .onion's are not exempt from DNS leaks. Since it's possible for people to run local DNS gTLDs, DNS infrastructure will generally respect and dutifully perform lookups for invalid domain names. DNS ...
cacahuatl's user avatar
  • 11k
5 votes
Accepted

Trying to config hidden service, but encounter folder permission error

Tor should control the hidden service private key, it has nothing at all to do with the httpd so you shouldn't be putting the private key or setting the hidden service directory anywhere related to ...
cacahuatl's user avatar
  • 11k
5 votes
Accepted

How do I host multiple hidden services? (Multiple addresses)

HiddenServicePort corresponds to the most recent HiddenServiceDir entry. HiddenServicePort VIRTPORT [TARGET] Configure a virtual port VIRTPORT for a hidden service. You may use this option ...
cacahuatl's user avatar
  • 11k
4 votes

Can a hidden service be hosted by multiple instances of Tor?

Running multiple Tor instances with the same private key will not provide reliable load balancing as normally only one instance descriptor is listed in the Tor hidden service DHT at a time. However I'...
Donncha's user avatar
  • 121
4 votes

Which node(s), if any, in the circuit for a hidden service, can see the URI of a request to a hidden service?

(Assuming the URL is http://X.onion?foo=bar) One relay (HSDir) knows that someone (but not who) wanted to look up the record for where to leave a message to request to talk to "X". Another relay (...
cacahuatl's user avatar
  • 11k
4 votes

Tor Browser won't launch after torrc file edited for hidden services

Make sure you have the directory C:\Users\UserName\tor_service and tor has read, write, and execute permissions.
v7d8dpo4's user avatar
  • 305
4 votes
Accepted

Adding Clinet SSL to HIdden Service

It's exactly the same excepting that no CA will sign your CSR (it'll be a self-signed certificate) and it's mostly superfluous because .onion is already providing end-to-end authenticate encryption. ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

How does "HiddenServiceAuthorizeClient" work?

A hidden service is truly hidden, this add another layer to discriminate clients. In traditional HS, a hidden server publish in the tor network how to begin a communication with it (not its true ...
rjmalagon's user avatar
4 votes
Accepted

How can Facebook's Tor Onion be constantly accessible with the massive bandwidth demand?

First of all to entirely deny service to an onion service you'd need to take 6 positions in the hidden service directories hashring constantly. You need to generate long term identity keys for all 6 ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

Are hidden services portable?

Yes, the .onion address stays the same no matter what network you're using to connect to the Tor network.
Peter Gerber's user avatar
  • 1,342
4 votes
Accepted

SSH only for onion network

To achieve this, just change your SSH configuration so it only binds to 127.0.0.1 instead of 0.0.0.0, so it can only be accessed by local processes.
cacahuatl's user avatar
  • 11k
3 votes
Accepted

How many hidden services are there approximately

There are metrics available for this through Tor Metrics. See: Tor Metrics — Unique .onion addresses The following graph shows the number of unique .onion addresses in the network per day. These ...
cacahuatl's user avatar
  • 11k
3 votes

Port forwarding to a hidden service

Read The !$%# Manual HiddenServicePort VIRTPORT [TARGET] Configure a virtual port VIRTPORT for a hidden service. You may use this option multiple times; each time applies to the service using the ...
cacahuatl's user avatar
  • 11k
3 votes
Accepted

Designing P2P application over Tor

"the IP for other users to connect to?" Onion services don't use IPs. You should use SOCKS5's remote hostname functionality, this hands over the hostname to Tor and will ensure you do not ...
cacahuatl's user avatar
  • 11k
3 votes

How does the tor hash-password option work?

Here's a quick text explanation on how the password hash generator in Tor works: Obtain 8 random bytes from the system as Salt Append the bytes of the user specified password to the salt Repeat this ...
AyrA's user avatar
  • 131
3 votes

How does the tor hash-password option work?

https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n3007 If the 'HashedControlPassword' option is set, it must contain the salted hash of a secret password. The salted hash is computed ...
user13569's user avatar
3 votes

How to use FTP with Tor?

You need to make sure that these lines exist in the serverside torrc configuration: HiddenServiceDir /var/lib/tor/ftp-service/ HiddenServicePort 21 127.0.0.1:21 You should also make sure you use ...
c3ypt1c's user avatar
  • 57
3 votes

How do I add the DuckDuckGo .onion version to the Tor Browser search providers?

I've followed docksmouth and antiplex's good guide above. You can now install directly from the link below, my source code is on Github. Go to in Tor Browser http://www.andrewparadi.com/torduckgo/ ...
adrw's user avatar
  • 31
3 votes

Adding/removing hidden services while not affecting the others

It is now possible to create ephemeral onion services via the control port using the ADD_ONION and DEL_ONION commands (added in Tor 0.2.7.1-alpha). To create a new onion service (the address and ...
str4d's user avatar
  • 177
3 votes

Tor.service boot errors?

The "owner" conditional, as per the AppArmor wiki: The owner keyword is used to make the rule conditional on object ownership. Specifically the task must have the same euid/fsuid as the object ...
cacahuatl's user avatar
  • 11k
3 votes

How to perform NAT Punching with Tor

The NAT punching properties described in the video, are those of onion services. These are a default property of onion services. Normally if you've providing a service that you want to be accessible ...
cacahuatl's user avatar
  • 11k
3 votes

Fetching v2 rendezvous descriptor failed. Retrying at another directory

Your version of Tor has bug which causes this messages (see #21056). Version 0.3.0.6 has a partial fix. If you install this version there are high chances that the messages will go away. Currently the ...
Jens Kubieziel's user avatar
  • 8,570
3 votes

Tor domain name

Implementation is still ongoing, have a look at this ticket to see the status. I'm not aware that the Tor Project or any of the developers ever announced a release date. Yet, based on the ...
Peter Gerber's user avatar
  • 1,342
3 votes

Does facebook's hidden service url mean that collisions are feasible?

No, and yes. Facebook, hidden services, and https certs had talked on this. Facebook in fact brute forced only the first 40 bits and then made a backronym. Their hidden service name is "...
nobody's user avatar
  • 725
3 votes
Accepted

What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?

Ah, the answer turns out to be "use AutomapHostsOnResolve 1." From the Tor manual for the AutomapHostsOnResolve configuration directive: When this option is enabled, and we get a request to resolve ...
M12's user avatar
  • 181
3 votes

End-to-End encryption using hidden services

A Tor onion service host chooses several Tor nodes to serve as the host's introduction points. The host builds circuits to those nodes, and tells the nodes to use those circuits to forward ...
GruentleBarrk's user avatar
3 votes
Accepted

Tor hidden service URLs

There is no record of onion addresses kept anywhere in Tor network. Tor hidden services upload their descriptor on a Tor hidden service directory (HSDir) in a distributed hash table. The descriptor ...
defalt's user avatar
  • 205
3 votes

Why doesn't curl download from file a onion service?

According to man curl: --socks5 <host[:port]> Use the specified SOCKS5 proxy - but resolve the host name locally. This means --socks5 will use local resolver which CANNOT ...
Tomek's user avatar
  • 431
3 votes
Accepted

How did the FBI find the IP address of the Freedom Hosting servers?

According to this FAQ from the EFF, Freedom Host had a publicly visible IP address that allowed the FBI to physically seize their server: In December 2014, the FBI received a tip from a foreign law ...
sfmiller940's user avatar
3 votes

Is there a way to connect to a git remote located on the onion hidden service?

While marked answer is 100% correct I use a bit different approach. For ssh connections using OpenSSH client I utilze ProxyCommand for *.onion sites in the following way: Host *.onion ...
Tomek's user avatar
  • 431

Only top scored, non community-wiki answers of a minimum length are eligible