16
votes
Do all .onion addresses use SSL/TLS?
No, .onion sites are not using https/ssl by default. But the connection inside the Tor network is always encrypted, so it is not really necessary to use https for .onion sites. Exit nodes aren't used ...
- 2,209
14
votes
I got infected by ransomware, and it tells me to download Tor. What's going on?
What's going on?
You got a malware that encrypted all your files. To get them back, you have to pay. This type of malware is called Ransomware (Wikipedia).
What do you mean by encrypted all my files?...
- 460
13
votes
Accepted
Where I can find, export or download the biggest list of all .onion addresses?
You can extract the list from Hidden Service lists and search engines which are available at OnionDir - Deep Web Link Directory.
Or you can try Ahmia.fi site which is gathering .onion addresses using ...
- 1,115
12
votes
Accepted
What are the best Tor2Web anonymous gateways?
There are few available Tor2web network gateways:
*.tor2web.org,
*.tor2web.fi (managed by Ahmia - Onion Search Engine),
*.tor2web.blutmagie.de (managed by O.Selke with no block),
*.onion.sh (managed ...
- 1,115
11
votes
How do I add the DuckDuckGo .onion version to the Tor Browser search providers?
Instructions:
Download an existing 'opensearch' XML file for one of the DuckDuckGo provider add-ons, such as the 'Lite' version (or the 'html' version which is also non-JS by default): https://addons....
- 111
11
votes
Accepted
resolve .onion address from bash
You should use --socks5-hostname instead of just --socks5.
This way, the socks5 proxy does the hostname resolution. Otherwise curl tries to resolve the hostname itself, which it can't.
- 3,745
10
votes
How do I find onion sites?
There are many onion sites that are basically lists of onion sites. But many of those are not maintained or not well. Here are some links to find more links:
http://skunksworkedp2cg.onion/sites.html
...
- 3,745
9
votes
What are the best Tor2Web anonymous gateways?
Some people like http://onion.direct .
However I am a fan of onion.link.
I do know at least in terms of size of GOOG index, the results come out to:
onion.direct | 21k
onion.cab | 232k
onion....
- 195
8
votes
Can onion sites have subdomains?
Yes they can! For example, try http://whatever.bitmailendavkbec.onion which is the Bitmessage onion service with an arbitrary subdomain.
Not that the subdomain is not transmitted between the Tor ...
- 81
8
votes
Accepted
Hidden .onion service with 2048 bit (or 4096 bit) RSA private key -- how to host it?
You will almost certainly have to use a 1024 key. As of the current version to date, it doesn't seem as if 2048 or higher keys are supported.
And is it possible? (although I am sure it is, because ...
- 346
8
votes
Accepted
How to anonymize the programs from the terminal?
Torify is a simple wrapper that attempts to find the best underlying Tor wrapper available on a system. It calls torsocks or tsocks with a tor specific configuration file.
It'll take measures to ...
- 1,115
7
votes
How do Hidden Services get .onion domains that aren't random?
I also saw this project called scallion, which is GPU based hashing, unlike shallot, it is a lot faster. One disadvantage of this: it is coded for windows.
Anyway, for shallot, I entered php as the ...
7
votes
Accepted
Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?
No, the HS directory is accessed via Tor. See: https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549
The nodes running HS directories do form a distributed hash table, though it's not ...
- 517
6
votes
Securely hosting a Tor hidden service/site
Interesting discussion points thus far.
Use VMs as discussed. I prefer VMware because of the networking, cloning, console access, replication, etc. No need for an OSS hypervisor discussion. ...
- 61
6
votes
Can People Scan a .onion Address For Hidden Services?
Yes it can be scanned.
People can scan for services as they do on clearnet, by routing their scanner through tor pointing it at the domain.
A onion domain is not to be considered a secret.
Im not ...
- 1,863
6
votes
What are the best Tor2Web anonymous gateways?
Also to mention onion.cab which is 5 times faster than browsing via the tor-client, because of its static-files-caching.
- 216
6
votes
resolve .onion address from bash
Moreover, you should use torsocks - built-in utility for working with Tor Network.
It is designed to prevent any leakage! Please, read the man page.
For example:
root@localhost:/# torsocks curl ...
- 61
6
votes
I got infected by ransomware, and it tells me to download Tor. What's going on?
I'm sorry to hear that! It sounds like you have been infected with ransomware named "Cryptowall". This is a type of malware that encrypts your files and deletes the originals, and then blackmails you ...
- 3,391
6
votes
Accepted
Are .onion addresses leak-proof?
No, .onion's are not exempt from DNS leaks.
Since it's possible for people to run local DNS gTLDs, DNS infrastructure will generally respect and dutifully perform lookups for invalid domain names. DNS ...
- 10.8k
5
votes
Accepted
Visiting websites also run as hidden service
It must be done manually. There is no interaction between the Domain Name System (DNS) and Tor hidden service hostnames. See this answer about resolution of .onion domains.
- 2,989
5
votes
Searching for Tor hidden servicces
These are search engines that index .onion sites:
Torch
not Evil
Candle
ahmia.fi
- 3,745
5
votes
Accepted
1000s of hidden services
There are known scaling problems with running more than a few dozen hidden services in a single Tor process.
I think the 100% CPU load comes either from constantly generating and signing new hidden ...
- 3,391
5
votes
Retrieving hidden service descriptors
Tor now has a HSFETCH control port command which allows Tor hidden service descriptors to be retrieved from the hidden service directories.
I've uploaded a simple Python script which uses the Stem ...
- 121
5
votes
Where I can find, export or download the biggest list of all .onion addresses?
Harry71 has a list of onion-hosts which provide a public web site, which you can get in machine readable format.
http://skunksworkedp2cg.onion/sites.txt
It gets updated fairly often.
- 286
5
votes
Accepted
Why do some websites have both onion address and non onion address?
Because they want give privacy aware users a choice.
If a user connects to the onion domain then the whole communication is end-to-end encrypted.
This means that users who wants can connect and use ...
- 1,863
5
votes
Accepted
What encryption algorithms does Tor use?
What encryption algorithms does Tor use?
See the following sections of the Tor Protocol Specification:
0.2 Security parameters
0.3 Ciphers
Isn't RSA 1024 considered weak?
1024 hasn't been broken ...
- 3,105
5
votes
Accepted
Decrease number of hidden service hops?
There are several amendments to Tor being researched to enable this functionality; the functionality does reduce/remove the anonymity of the server but sometimes that is okay, e.g. if (like Facebook) ...
- 136
Only top scored, non community-wiki answers of a minimum length are eligible