14 votes

I got infected by ransomware, and it tells me to download Tor. What's going on?

What's going on? You got a malware that encrypted all your files. To get them back, you have to pay. This type of malware is called Ransomware (Wikipedia). What do you mean by encrypted all my files?...
Yuriko's user avatar
  • 460
12 votes
Accepted

resolve .onion address from bash

You should use --socks5-hostname instead of just --socks5. This way, the socks5 proxy does the hostname resolution. Otherwise curl tries to resolve the hostname itself, which it can't.
Jobiwan's user avatar
  • 3,665
7 votes

resolve .onion address from bash

Moreover, you should use torsocks - built-in utility for working with Tor Network. It is designed to prevent any leakage! Please, read the man page. For example: root@localhost:/# torsocks curl ...
snowden's user avatar
  • 71
6 votes

I got infected by ransomware, and it tells me to download Tor. What's going on?

I'm sorry to hear that! It sounds like you have been infected with ransomware named "Cryptowall". This is a type of malware that encrypts your files and deletes the originals, and then blackmails you ...
Roger Dingledine's user avatar
6 votes
Accepted

Are .onion addresses leak-proof?

No, .onion's are not exempt from DNS leaks. Since it's possible for people to run local DNS gTLDs, DNS infrastructure will generally respect and dutifully perform lookups for invalid domain names. DNS ...
cacahuatl's user avatar
  • 10.9k
5 votes

Searching for Tor hidden servicces

These are search engines that index .onion sites: Torch not Evil Candle ahmia.fi
Jobiwan's user avatar
  • 3,665
5 votes
Accepted

What encryption algorithms does Tor use?

What encryption algorithms does Tor use? See the following sections of the Tor Protocol Specification: 0.2 Security parameters 0.3 Ciphers Isn't RSA 1024 considered weak? 1024 hasn't been broken ...
Richard Horrocks's user avatar
5 votes
Accepted

Decrease number of hidden service hops?

There are several amendments to Tor being researched to enable this functionality; the functionality does reduce/remove the anonymity of the server but sometimes that is okay, e.g. if (like Facebook) ...
Alec Muffett's user avatar
5 votes
Accepted

Trying to config hidden service, but encounter folder permission error

Tor should control the hidden service private key, it has nothing at all to do with the httpd so you shouldn't be putting the private key or setting the hidden service directory anywhere related to ...
cacahuatl's user avatar
  • 10.9k
5 votes
Accepted

How do I host multiple hidden services? (Multiple addresses)

HiddenServicePort corresponds to the most recent HiddenServiceDir entry. HiddenServicePort VIRTPORT [TARGET] Configure a virtual port VIRTPORT for a hidden service. You may use this option ...
cacahuatl's user avatar
  • 10.9k
4 votes

Can a hidden service be hosted by multiple instances of Tor?

Running multiple Tor instances with the same private key will not provide reliable load balancing as normally only one instance descriptor is listed in the Tor hidden service DHT at a time. However I'...
Donncha's user avatar
  • 121
4 votes
Accepted

From what depends .onion addresses - public or private key of the service?

The public key is also derived from the private key. The .onion address is a hash of the public key but ultimately both are derived from the private key. Generate a private key, Get the public key ...
Jobiwan's user avatar
  • 3,665
4 votes

Which node(s), if any, in the circuit for a hidden service, can see the URI of a request to a hidden service?

(Assuming the URL is http://X.onion?foo=bar) One relay (HSDir) knows that someone (but not who) wanted to look up the record for where to leave a message to request to talk to "X". Another relay (...
cacahuatl's user avatar
  • 10.9k
4 votes

Tor Browser won't launch after torrc file edited for hidden services

Make sure you have the directory C:\Users\UserName\tor_service and tor has read, write, and execute permissions.
v7d8dpo4's user avatar
  • 305
4 votes
Accepted

Adding Clinet SSL to HIdden Service

It's exactly the same excepting that no CA will sign your CSR (it'll be a self-signed certificate) and it's mostly superfluous because .onion is already providing end-to-end authenticate encryption. ...
cacahuatl's user avatar
  • 10.9k
4 votes
Accepted

How does "HiddenServiceAuthorizeClient" work?

A hidden service is truly hidden, this add another layer to discriminate clients. In traditional HS, a hidden server publish in the tor network how to begin a communication with it (not its true ...
rjmalagon's user avatar
4 votes
Accepted

How can Facebook's Tor Onion be constantly accessible with the massive bandwidth demand?

First of all to entirely deny service to an onion service you'd need to take 6 positions in the hidden service directories hashring constantly. You need to generate long term identity keys for all 6 ...
cacahuatl's user avatar
  • 10.9k
4 votes
Accepted

Are hidden services portable?

Yes, the .onion address stays the same no matter what network you're using to connect to the Tor network.
Peter Gerber's user avatar
  • 1,342
4 votes
Accepted

SSH only for onion network

To achieve this, just change your SSH configuration so it only binds to 127.0.0.1 instead of 0.0.0.0, so it can only be accessed by local processes.
cacahuatl's user avatar
  • 10.9k
3 votes
Accepted

Designing P2P application over Tor

"the IP for other users to connect to?" Onion services don't use IPs. You should use SOCKS5's remote hostname functionality, this hands over the hostname to Tor and will ensure you do not ...
cacahuatl's user avatar
  • 10.9k
3 votes
Accepted

Does deepnet have only 7100 onion sites?

Your calculation is not fully correct. The hidden service address is encoded in Base32, which means there are 32 characters available. So there are 32^16=1.208925819614629174706176×10^24 addresses ...
Jens Kubieziel's user avatar
  • 8,561
3 votes

How to use FTP with Tor?

You need to make sure that these lines exist in the serverside torrc configuration: HiddenServiceDir /var/lib/tor/ftp-service/ HiddenServicePort 21 127.0.0.1:21 You should also make sure you use ...
c3ypt1c's user avatar
  • 57
3 votes

How do I add the DuckDuckGo .onion version to the Tor Browser search providers?

I've followed docksmouth and antiplex's good guide above. You can now install directly from the link below, my source code is on Github. Go to in Tor Browser http://www.andrewparadi.com/torduckgo/ ...
adrw's user avatar
  • 31
3 votes

How does the tor hash-password option work?

Here's a quick text explanation on how the password hash generator in Tor works: Obtain 8 random bytes from the system as Salt Append the bytes of the user specified password to the salt Repeat this ...
AyrA's user avatar
  • 131
3 votes

How does the tor hash-password option work?

https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n3007 If the 'HashedControlPassword' option is set, it must contain the salted hash of a secret password. The salted hash is computed ...
user13569's user avatar
3 votes
Accepted

Register .onion as gTLD?

Update 2015 IANA added .onion to the list of Special-Use Domain Names. This was based on RFC 7686: The ".onion" Special-Use Domain Name. Tor’s ticket #6116: apply for .onion gTLD at IANA got ...
unor's user avatar
  • 398
3 votes

Adding/removing hidden services while not affecting the others

It is now possible to create ephemeral onion services via the control port using the ADD_ONION and DEL_ONION commands (added in Tor 0.2.7.1-alpha). To create a new onion service (the address and ...
str4d's user avatar
  • 177
3 votes
Accepted

Can a client accessing a Tor service bypass a firewall, and if so, why is it possible?

When a normal, non-hidden service is behind a NAT router / firewall, it can not accept incoming connections from the internet, unless some port forwarding is configured in the router. Hidden ...
Jobiwan's user avatar
  • 3,665
3 votes
Accepted

When using custom keys, what permissions do "/var/lib/tor/hidden_service/" need?

I don't know if it is strictly necessary, for me it works with these permissions: 700 (or drwx------) for the folder (folder2 in your case) 600 (or -rw-------) for the private_key file. Both owned ...
Jobiwan's user avatar
  • 3,665
3 votes

block tor2web, onion.city,cab, .link etc

The Tor2Web software includes an 'X-tor2web' header in all hidden service requests [1]. You should be able to configure nginx to block requests or show an error page when the request includes a 'X-...
Donncha's user avatar
  • 121

Only top scored, non community-wiki answers of a minimum length are eligible