14
votes
I got infected by ransomware, and it tells me to download Tor. What's going on?
What's going on?
You got a malware that encrypted all your files. To get them back, you have to pay. This type of malware is called Ransomware (Wikipedia).
What do you mean by encrypted all my files?...
12
votes
Accepted
resolve .onion address from bash
You should use --socks5-hostname instead of just --socks5.
This way, the socks5 proxy does the hostname resolution. Otherwise curl tries to resolve the hostname itself, which it can't.
7
votes
resolve .onion address from bash
Moreover, you should use torsocks - built-in utility for working with Tor Network.
It is designed to prevent any leakage! Please, read the man page.
For example:
root@localhost:/# torsocks curl ...
6
votes
I got infected by ransomware, and it tells me to download Tor. What's going on?
I'm sorry to hear that! It sounds like you have been infected with ransomware named "Cryptowall". This is a type of malware that encrypts your files and deletes the originals, and then blackmails you ...
6
votes
Accepted
Are .onion addresses leak-proof?
No, .onion's are not exempt from DNS leaks.
Since it's possible for people to run local DNS gTLDs, DNS infrastructure will generally respect and dutifully perform lookups for invalid domain names. DNS ...
5
votes
Searching for Tor hidden servicces
These are search engines that index .onion sites:
Torch
not Evil
Candle
ahmia.fi
5
votes
Accepted
What encryption algorithms does Tor use?
What encryption algorithms does Tor use?
See the following sections of the Tor Protocol Specification:
0.2 Security parameters
0.3 Ciphers
Isn't RSA 1024 considered weak?
1024 hasn't been broken ...
5
votes
Accepted
Decrease number of hidden service hops?
There are several amendments to Tor being researched to enable this functionality; the functionality does reduce/remove the anonymity of the server but sometimes that is okay, e.g. if (like Facebook) ...
5
votes
Accepted
Trying to config hidden service, but encounter folder permission error
Tor should control the hidden service private key, it has nothing at all to do with the httpd so you shouldn't be putting the private key or setting the hidden service directory anywhere related to ...
5
votes
Accepted
How do I host multiple hidden services? (Multiple addresses)
HiddenServicePort corresponds to the most recent HiddenServiceDir entry.
HiddenServicePort VIRTPORT [TARGET]
Configure a virtual port VIRTPORT for a hidden service. You may use this option ...
4
votes
Can a hidden service be hosted by multiple instances of Tor?
Running multiple Tor instances with the same private key will not provide reliable load balancing as normally only one instance descriptor is listed in the Tor hidden service DHT at a time.
However I'...
4
votes
Accepted
From what depends .onion addresses - public or private key of the service?
The public key is also derived from the private key. The .onion address is a hash of the public key but ultimately both are derived from the private key.
Generate a private key,
Get the public key ...
4
votes
Which node(s), if any, in the circuit for a hidden service, can see the URI of a request to a hidden service?
(Assuming the URL is http://X.onion?foo=bar)
One relay (HSDir) knows that someone (but not who) wanted to look up the record for where to leave a message to request to talk to "X".
Another relay (...
4
votes
Tor Browser won't launch after torrc file edited for hidden services
Make sure you have the directory C:\Users\UserName\tor_service and tor has read, write, and execute permissions.
4
votes
Accepted
Adding Clinet SSL to HIdden Service
It's exactly the same excepting that no CA will sign your CSR (it'll be a self-signed certificate) and it's mostly superfluous because .onion is already providing end-to-end authenticate encryption.
...
4
votes
Accepted
How does "HiddenServiceAuthorizeClient" work?
A hidden service is truly hidden, this add another layer to discriminate clients.
In traditional HS, a hidden server publish in the tor network how to begin a communication with it (not its true ...
4
votes
Accepted
How can Facebook's Tor Onion be constantly accessible with the massive bandwidth demand?
First of all to entirely deny service to an onion service you'd need to take 6 positions in the hidden service directories hashring constantly.
You need to generate long term identity keys for all 6 ...
4
votes
Accepted
Are hidden services portable?
Yes, the .onion address stays the same no matter what network you're using to connect to the Tor network.
4
votes
Accepted
SSH only for onion network
To achieve this, just change your SSH configuration so it only binds to 127.0.0.1 instead of 0.0.0.0, so it can only be accessed by local processes.
3
votes
Accepted
Designing P2P application over Tor
"the IP for other users to connect to?"
Onion services don't use IPs. You should use SOCKS5's remote hostname functionality, this hands over the hostname to Tor and will ensure you do not ...
3
votes
Accepted
Does deepnet have only 7100 onion sites?
Your calculation is not fully correct. The hidden service address is encoded in Base32, which means there are 32 characters available. So there are 32^16=1.208925819614629174706176×10^24 addresses ...
3
votes
How to use FTP with Tor?
You need to make sure that these lines exist in the serverside torrc configuration:
HiddenServiceDir /var/lib/tor/ftp-service/
HiddenServicePort 21 127.0.0.1:21
You should also make sure you use ...
3
votes
How do I add the DuckDuckGo .onion version to the Tor Browser search providers?
I've followed docksmouth and antiplex's good guide above. You can now install directly from the link below, my source code is on Github.
Go to in Tor Browser http://www.andrewparadi.com/torduckgo/
...
3
votes
How does the tor hash-password option work?
Here's a quick text explanation on how the password hash generator in Tor works:
Obtain 8 random bytes from the system as Salt
Append the bytes of the user specified password to the salt
Repeat this ...
3
votes
How does the tor hash-password option work?
https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n3007
If the 'HashedControlPassword' option is set, it must contain the salted
hash of a secret password. The salted hash is computed ...
3
votes
Accepted
Register .onion as gTLD?
Update 2015
IANA added .onion to the list of Special-Use Domain Names.
This was based on RFC 7686: The ".onion" Special-Use Domain Name.
Tor’s ticket #6116: apply for .onion gTLD at IANA got ...
3
votes
Adding/removing hidden services while not affecting the others
It is now possible to create ephemeral onion services via the control port using the ADD_ONION and DEL_ONION commands (added in Tor 0.2.7.1-alpha).
To create a new onion service (the address and ...
3
votes
Accepted
Can a client accessing a Tor service bypass a firewall, and if so, why is it possible?
When a normal, non-hidden service is behind a NAT router / firewall, it can not accept incoming connections from the internet, unless some port forwarding is configured in the router.
Hidden ...
3
votes
Accepted
When using custom keys, what permissions do "/var/lib/tor/hidden_service/" need?
I don't know if it is strictly necessary, for me it works with these permissions:
700 (or drwx------) for the folder (folder2 in your case)
600 (or -rw-------) for the private_key file.
Both owned ...
3
votes
block tor2web, onion.city,cab, .link etc
The Tor2Web software includes an 'X-tor2web' header in all hidden service requests [1].
You should be able to configure nginx to block requests or show an error page when the request includes a 'X-...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
onion-services × 607configuration × 89
onion-routing × 72
tor-browser-bundle × 58
security × 47
anonymity × 40
relays × 25
web-hosting × 18
help × 17
encryption × 16
network-configuration × 15
deanonymization × 15
directory × 14
website × 14
server × 14
ssh × 14
server-administration × 14
hsdir × 14
dns × 12
attacks × 12
protocol × 12
ubuntu × 11
windows × 10
exit-relays × 9
torsocks × 9