- tor-onions - lists.torproject.org

Testing 0.2.9 (and Single Onion Services)
by teor 09 Nov '16

09 Nov '16

Hi, We recently put out a call for testing Tor 0.2.9, which includes the Single Onion Service feature. https://lists.torproject.org/pipermail/tor-dev/2016-October/011541.html To use this feature, put the following lines in your torrc: HiddenServiceSingleHopMode 1 HiddenServiceNonAnonymousMode 1 Tim T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------------

3 2

Research - Tor and the shaping of resistance technologies
by COLLIER Ben 09 Nov '16

09 Nov '16

Hello all, Greetings from (currently freezing cold) Scotland and apologies for the cross-posting. I'm a researcher at the University of Edinburgh studying antisurveillance technologies, software development and how these are shaped at different levels by ideas about crime and surveillance. I'd describe my work as criminological but with a strong critical dimension - my research isn't about "fighting crime" or developing cybersecurity policy. I'm interested instead in exploring the power relationships, social and technological factors which determine how actions and communities are labelled criminal, and include harms caused by states and other powerful actors which may not traditionally be considered as "crimes". >From this perspective, I would like to explore how the values and perspectives of people who develop software to resist surveillance and promote anonymity online shape the technologies they work on, and whether this expertise changes how they see these issues. I have a background in (statistical) programming and I'm particularly interested in finding out how people see these issues playing out in practice in their work. While I'd like to carry out more in-depth research in the new year, at this stage I'm interested in making sure I'm asking the right questions. As such, I'd be very grateful if anyone involved in Tor development, either as a core developer or as a volunteer, would be interested in having a chat, or if possible a short interview. Any discussions would be anonymous and carried out in accordance with the ethics policy of the University of Edinburgh, and you would be able to withdraw consent for participation at any time for any reason - or none at all. I'll be contactable at this email address (listed in my signature) and on the IRC channels as JHistone - if you're interested (or just want to say hi or have a chat) please feel free to get in touch. Best wishes, Ben Collier Doctoral Researcher The University of Edinburgh SCCJR profile: http://www.sccjr.ac.uk/about-us/people/ben-collier/ Edinburgh University profile: http://www.law.ed.ac.uk/research/students/viewstudent?ref=339 Twitter: @JohnnyHistone Email: s1263350(a)sms.ed.ac.uk The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

1 0

Subscription mailing list
by Joan Smith 26 Sep '16

26 Sep '16

Joan Smith 3505 Simen ave. Pittsburgh pa 15212

1 0

My hidden service stop accepting traffic after a week or so
by mdrot＠sigaint.org 19 Sep '16

19 Sep '16

Hello, This place seems very quite, not sure if this is the right place to ask. I'm encountering a weird behavior from my tor daemon that's running a hidden service, after a week or two, it stops accepting any connections. And the only thing that makes it work again is a restart. I'm using Tor 0.2.8.7 Sep 19 23:12:17.607 [notice] Tor v0.2.8.7 (git-cc2f02ef17899f86) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1k and Zlib 1.2.8. I also see a warning like, could this be the cause ? [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 1000114f: OpenSSL 1.0.1t 3 May 2016; running with 100010bf: OpenSSL 1.0.1k 8 Jan 2015). Sep 19 23:12:17.607 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Also found somebody complaining about the same behavior, but without any answers http://serverfault.com/questions/745572/ubuntu-14-04-tor-doesnt-restore-cir… Cheers, Md Rot

2 3

Work In Progress Draft: Installing Onion Addresses on Ubuntu Server
by Alec Muffett 19 Sep '16

19 Sep '16

For comments and suggestions: https://github.com/alecmuffett/drafts-not-complete-not-tested-do-not-use/bl… - alec -- http://dropsafe.crypticide.com/aboutalecm

1 0

Dark Web OSINT With Python and OnionScan: Part One
by Muri Nicanor 29 Jul '16

29 Jul '16

FYI: someone scanned around 8000 onion services with onionscan and published the results: http://www.automatingosint.com/blog/2016/07/dark-web-osint-with-python-and-… cheers, -- muri

2 1

Hidden Service "Generic SOCKS Error"
by Darcy Marshall 21 Jul '16

21 Jul '16

I recently set up a hidden service. The address for this hidden service is spydaroo7gtsipwm.onion. When I first start Tor on the server, it will work fine. Then after a while, maybe after a few visits or a few hours, it stops working. Both apache2 and Tor continue to run, but Tor Browser just acts as though it doesn't exist (cannot connect). Logs show errors of "general socks error". Tor2web services like onion.to also stop working and give generic SOCKS error. The way to fix this is to restart Tor on the server. It then works, but eventually will return to having a socks error. Does anyone know a reason for why this is happening or how to fix it? — Spydar007 http://spydar007.com PGP Key ID: D3364A0B

4 4

hiddenserviceauthorizeclient stealth vs basic techinal details
by Joy 19 Jul '16

19 Jul '16

Hey everyone, The Tor manual has some basic information about the difference between the stealth and basic authorization options, but can anyone point me to the actual technical differences between these options? What exactly does the stealth mode do to hide service activity from unauthorized clients and why is this less scalable? Thanks, Joy

2 1

Automatically redirecting to hidden service
by laethust＠nonkly.com 08 Jul '16

08 Jul '16

Are there any security risks in using PHP to automatically redirect a user to the hidden service URL of your site? So if someone went to my site, example.com, using the Tor Browser, I would automatically redirect them to the onion address for example.com.

1 0

Re: [tor-onions] tor-onions Digest, Vol 7, Issue 2
by Kevin Froman 04 Jul '16

04 Jul '16

You could use Whonix as well. (Not supported or created by the Tor Project) https://whonix.org/ There is still opportunity for info leakage, so its best to not store identifying info inside the workstation if you are running a hidden service. You can also set Tor-level cookie authentication if your service is private. See the Tor manual for that. On Jul 4, 2016 7:00 AM, <tor-onions-request(a)lists.torproject.org> wrote: Send tor-onions mailing list submissions to tor-onions(a)lists.torproject.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-onions or, via email, send a message with subject or body 'help' to tor-onions-request(a)lists.torproject.org You can reach the person managing the list at tor-onions-owner(a)lists.torproject.org When replying, please edit your Subject line so it is more specific than "Re: Contents of tor-onions digest..." Today's Topics: 1. Re: Hidden Service IP Addresses (ncl(a)cock.li) ---------------------------------------------------------------------- Message: 1 Date: Sun, 3 Jul 2016 19:47:28 +0000 From: "ncl(a)cock.li" <ncl(a)cock.li> To: tor-onions(a)lists.torproject.org Subject: Re: [tor-onions] Hidden Service IP Addresses Message-ID: <57796BD0.6000002(a)cock.li> Content-Type: text/plain; charset=utf-8 Flipchan: > Most Common is that an attacker gets root access or finds an rce bug > on ur system and useage that to login to ur sys and by that gettin > the ip,u can ofc run the site with a usr account and proxy all > connections through tor with ip tables What ------------------------------ Subject: Digest Footer _______________________________________________ tor-onions mailing list tor-onions(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-onions ------------------------------ End of tor-onions Digest, Vol 7, Issue 2 ****************************************

1 0