4
Near the top of this page: Consensus Health, in the Signatures section, you will find a 'consensus' (and 'vote') link for each Directory Authority.
These link directly to http://ip.of.the.relay:dirport/tor/status-vote/current/consensus.
4
Ok, I figured this out. For some reason the custom onion address I made with Shallot was no longer working. I made a new hidden service and got rid of the existing one, restarted Tor, and voila! I'm not sure why this happened, but this solved both hidden services that had stopped working.
3
You need to add a server entry in your Nginx config file for each service. For example, with two hidden services your config file might look something like:
server {
listen 127.0.0.1:<port_hidden_service_1>;
root /path/to/hidden_service_1/;
index_1 index_1.html index_1.htm;
server_name domain_1.onion;
}
server {
listen 127.0....
3
While marked answer is 100% correct I use a bit different approach. For ssh connections using OpenSSH client I utilze ProxyCommand for *.onion sites in the following way:
Host *.onion
ProxyCommand socat STDIO SOCKS4A:<tor socks hostname or IP>:%h:%p,socksport=9050
This should also be the only change needed for git ssh ...
3
What prevents a directory server from being dishonest and give malicious data to the user?
The information served by the directories is generated by reaching a consensus between the authorities. You would have to control the majority of the authorities to manipulate the consensus. This should be fairly hard as they are neither under the control of one ...
3
You can easily fetch the consensus with...
https://stem.torproject.org/api/descriptor/remote.html
https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html
For an example of a script that compares a couple authorities see...
https://stem.torproject.org/tutorials/examples/compare_flags.html
That said, please don't hit the authorities every five ...
3
I have set up gits in the past, and have used Tor to protect them. It works just as setting up any other service. Simply set up your server (ensure that there is not something that could expose your true IP address in it), and then forward the port to Tor.
The only problem I have had in the past with this is the fact that it isn't easy to connect to Tor ...
3
Unless you edit your tor configuration (your torrc file) to add an onion service, tor won't run any onion services and no one will be able to connect to any of your local servers, so you're safe. Even if you accidentally set up a v3 onion service, anyone who wishes to connect to your service would need to know the full 32-byte public identity key of the ...
2
Should be fine. You're just affecting connections originating at your own machine. Whether it is safe to use drupal's autoupdater at all is something you have to ask yourself, of course.
2
The difference is because Tonga is a little special. Unlike the other directory authorities Tonga doesn't vote in the consensus (iirc it's the bridge authority). Take a peek at the following list...
https://gitweb.torproject.org/stem.git/tree/stem/descriptor/remote.py#n674
Note that Tonga doesn't have a v3ident. Tonga is an authority, but doesn't vote so ...
2
Thanks for running a relay. (:
Clients choose which relays to use based on their consensus weight. The consensus weight is assigned by the directory authorities after measuring the throughput for your relay.
There are a number of things that can impact the speed at which your relay can be used, including the CPU speed, CPU architecture, the network ...
2
You have a simple nginx webserver and it is listening on http port 80 for mywebsite.com.
You set up tor to also listen externally on virtual port 80 as a onion service for mywebsiteabcxyz.onion.
This can all live on the same web server at the same time. No reverse proxy is required. The key is that tor will always listen for a virtual onion service port ...
2
I'm not sure what exactly you mean here; but if you're trying to run a onion service you don't have to deal with JavaScript at all if you don't want to. Just don't include any JavaScript code on the webpages/services you plan to offer via the onion service.
If you meant how you can disable all web servers from delivering JavaScript to the websites you visit, ...
1
for sure is it possible to run Tor headless also on an ARM server! (although i'm not sure if every ARM platform has precompiled packages...)
for example here is a very detailed guide for the Raspberry Pi:
https://learn.adafruit.com/onion-pi/overview
or a script collection to made installing/handling easier:
https://github.com/spiegelonline/sponionpi (partly ...
1
torsocks is the way to go. You may need to install it separately from Tor if it is not installed automatically.
Make sure Tor is running: systemctl status tor
Run your command through torsocks: torsock git pull or torsocks ssh abcxyz.onion
Another option is to run torsocks --shell. This will make all commands in that shell automatically run through Tor. ...
1
Most of these questions are far too broad, but I'll do my best.
Setting an onion service is easy. You install the Tor service, tell it to use port 80, get your new onion address and start a web server. That's easy. Here is the official guide
if there is an extising guide from buying the server through to server
coding and other softwhere pointers?
...
1
The main idea is that the onion service only makes outbound connections. Whenever it communicates with someone, the onion service creates a circuit to some relay and receives communication from the end of that circuit. This way the relay accepts new connections (through introduction and rendezvous points) and forwards information to the onion service through ...
1
No.
The Control Port is used to control and query the Tor client.
Using Tor as a client and implementing the HTTP protocol is outside of the scope of what the Control Port and the Tor daemon aim to provide.
If you wish to fetch HTTP content over Tor from the command line then there are common commandline utilities like curl, e.g. curl -x socks5h://127.0.0....
1
If your guard node is failing, you could try using a different guard node if you really really want to:
How to change the entry node?
But according to this answer, you shouldn't have to:
Should I choose a new guard if the network is overloaded?
There are security implications to changing your guard node:
Why is a longer guard rotation period with fewer ...
1
The short answer "you can't", the description is: after sending a termination signal - it's wise to let the network find another chains, so that's why there's a delay in order, and there's absolutely nothing wrong with it. To reduce the delay - it does not works all the times - you can set via ControlPort "DisableNetwork 1" and give Tor 5-10 seconds, then ...
1
No, you cannot directly have an incoming clearnet IP. I.e. you cannot use the public clearnet IP of a Tor exit relay to anonymously host a server.
Explanation on incoming connections / opening ports:
https://www.whonix.org/wiki/Ports
Indirectly works by using VPN with Remote Port Forwarding or pagekite. See:
https://www.whonix.org/wiki/...
1
Yes, it's sad that it's not in the logs, but it is buried deep in the protocol mechanics. A brief guess is coming out of the EnforceDistinctSubnets directive description. To fix the case when you have just a single address use a VPN with unlimited traffic and static IP address like this - as far as I remember they used to provide a static address with ...
1
As of March 2021, it appears the HARICA, a certificate authority based in Greece, also allows you to obtain an SSL certificate for a .onion domain. While HARICA offers them cheaper,
To quote their website, one of the types of certificates they offer is listed as
SSL DV Onion (Domain Validated - Onion): SSL/TLS Server Certificate that includes one or more ...
1
As of February 2020, this is now technically possible, but it has yet to be implemented by Let's Encrypt.
Why https for .onion domains?
First, I think it's necessary to point out that there are non-security-related, logistical reasons for why you'd want to add a valid TLS cert for a website served on an onion service: there are many tools/protocols that are ...
1
You cannot.
Currently only EV certs that are valid for both some canonicle domain and an onion address are able to have TLS certificates issued but not an onion address alone, and not non-EV certificates.
This is essentially a policy thing internal to the CA/Browser forum.
From Ryan Sleevi's response to Alec Muffett asking the same question:
"- At ...
1
"How did it get there"
No idea.
"what is it"
It looks like a Tor network consensus document
"why did it delete my PHP file"
It's a plain text file, it couldn't have.
"how do I prevent this from happening again?"
Since no one has any idea how it happened, no one knows.
1
Tor Project: FAQ says:
If you want to experiment locally with your own network, or you're cut off from the Internet and want to be able to mess with Tor still, then you may want to set up your own separate Tor network.
To set up your own Tor network, you need to run your own authoritative directory servers, and your clients and relays must be ...
1
you must migrate your whole DataDirectory - the one you've specified in your torrc. after that you're pointing your new-hosted Tor to the same directory and config - and that's it! You can change a filesystem path of the dir, of course - just don't forget to reflect it in your torrc before running tor.
1
Tor can be used for several users at a time. Run Tor as daemon if you want, then you can proceed to run any network/internet software through Tor socks proxy:
torsocks *software*
For options about configuring and customizing the torsocks proxy, you can consult the torrc config file.
Only top voted, non community-wiki answers of a minimum length are eligible