February 2017 - tor-onions - lists.torproject.org

dark-net
by Jörg Hager 27 Feb '17

27 Feb '17

Dear Sirs, I'm not really in the Dark-net but I only get links which I mostly can get in the original net. I'm needed in links about real slavery today like "where can I buy a real gay slave?" or "who sells a real gay slave?" "gay slave trafficking" and "gay slave trade". Or some similar links. Please be so kind and send me some links I can use these informations because I'm unfortunately a real greenhorn to use my comp in a manner that would please me. Many thanks for your efforts! Kind regards Jörg Hager

1 0

(no subject)
by B B 26 Feb '17

26 Feb '17

1 0

(no subject)
by Andri Effendi 21 Feb '17

21 Feb '17

3 2

Hidden Service Manuals for Beginners
by Andri Effendi 18 Feb '17

18 Feb '17

2 1

no connection to tor hidden services on arduino yun/openwrt
by Markus 17 Feb '17

17 Feb '17

hi tor-onions list, after trying my best i'm following the hint [1] to seek for help in this list. what i want to achive: i set up a sensor node running openwrt in an area in germany without wifi. so i want to connect (to) it via gsm/gprs (german telekom/d1). connecting from the node to the internet is no problem. problem is: i cant reach any services on the node from the internet because the gsm-carrier runs some intransparant internal ipv4-proxy or switch or whatever to save ipv4-addresses so neither the ip nor dyndns is working. my idea to workaround: run tor hidden services on the node. http [2] for luci/graphical admin interface and ssl [3] for general administrative tasks. for setup i followed one general howto [4] and one ssl specific [5]. i tried to debug via [1]. i enclosed my torrc further down. i waited over one hour for tor to broadcast its new services. but not even just the hello-world-page is popping up in my clients tor browser. didnt even try to connect to ssl yet. checked server config, curl 127.0.0.1:8080 is returning hello-world, checked tor config and files over and over. the tor browser on the client is working. no idea what else to try. i go to bed now. but i appreciate every hint and will report back tomorrow or the day after tomorrow. thanks in advance. mois #### /etc/tor/torrc ## Basic configuration Log notice syslog RunAsDaemon 1 DataDirectory /etc/tor User tor ## Hidden service configuration HiddenServiceDir /etc/tor/hidden_service HiddenServicePort 80 127.0.0.1:8080 HiddenServiceDir /etc/tor/hidden_ssh HiddenServicePort 2233 127.0.0.1:2233 ##EOF [1] https://www.torproject.org/docs/tor-hidden-service.html.en [2] xrscbcihug2ezrrb.onion [3] ntk6i23e5fcxo3j3.onion [4] https://gist.github.com/Informatic/65261ffd1aee8ddae861 [5] http://unethicalblogger.com/2012/06/13/ssh-as-a-hidden-service.html -- http://www.euse.de/honig/beescale/graph.php gpg-key: http://www.euse.de/meuse.asc fingerprint: C21C 61C1 6135 1C64 71AE DACF D382 D03A 42B7 CC03

3 10

relays
by Blake Starbuck 17 Feb '17

17 Feb '17

Get Relays

1 0

ucspi-onion
by Taylor R Campbell 05 Feb '17

05 Feb '17

I wrote a little ucspi-onion program, along the lines of ucspi-tcp and friends, to configure an onion service and serve it with any program that follows the UCSPI. Hg repository: https://mumble.net/~campbell/hg/ucspi-onion/ (The UCSPI is the `Unix client-server program interface', created for various djb tools: <https://cr.yp.to/proto/ucspi.txt>. It can also usually run any connection-oriented programs designed for inetd.) This can be combined with programs following the UCSPI, such as publicfile, to dynamically configure onions slightly more easily than <https://trac.torproject.org/projects/tor/wiki/doc/Publicfile>. This also avoids the TCP/IP stack altogether so that you can use Unix file system permissions to control access and limit leaks. This was an evening hack which I have not used in anger yet. If you feel inclined to try it and find it useful or encounter problems with it, I would be curious to hear. (I don't have a securedrop set up for you to post anonymous feedback, though, sorry!)

1 0

Onion Enterprise Toolkit - ALPHA
by Alec Muffett 04 Feb '17

04 Feb '17

Hi All, Yesterday I pushed this out to the world: https://github.com/alecmuffett/eotk - The Enterprise Onion Toolkit - currently EOTK works on OSX and could probably be coerced to run on various Linux but I have not documented nor tested that yet. The aim is that a site administrator can edit a very simple config file: # default project hardmap secrets.d/s2kpvtwjbawr3mx3.key aclu.org hardmap secrets.d/77bytc6x3bqdf7s6.key liberty-human-rights.org.uk # topical project set project digital-rights hardmap secrets.d/oh7b6dpvd3kgchfb.key openrightsgroup.org hardmap secrets.d/zbboaoeo6ruhqnu2.key eff.org hardmap secrets.d/m4x6zoaflrjez7dh.key accessnow.org hardmap secrets.d/wn74m5ts4r5xe4r4.key digitalrights.ie ...and run a couple of simple commands, and immediate get onion sites which do bidirectional rewriting of requests and responses between the given onion address and the given DNS domain. SSL support is afforded by automatically-generated self-signed certificates - an ugly hack, but it means that site owners can prototype an onion offering, and (eventually) put it into production with an equivalent EV cert. I am working on amendments to make EOTK very onionbalance-friendly; the eventual goal is to provide a filetree of NGINX + Tor configurations which can be rsync'd to a cloud of machines, and the onion-addresses thereby created get scraped for Onionbalance to publish. This will offer linear scalability for Enterprise Tor Onions. More users? Add more machines! And less "heavy" deployments can just use a single config without Onionbalance. There's a lot of work still to be done, but I thought I would mention it here in case folk would like to experiment and provide feedback so far. -a -- http://dropsafe.crypticide.com/aboutalecm

4 5

Monitoring .onion performance
by Tom Ritter 02 Feb '17

02 Feb '17

If I set up OnionBalance, and have two backend onion servers - how would I know if I need to add another onion server and balance it further? I can easily monitor the CPU/Memory usage of the onion servers, but does that tell the whole story? I assume there's potentially other ways connection failures can occur... -tom

4 3