- tor-onions - lists.torproject.org

Garbage collection of abandoned onion servers
by p13dz p13dz 18 Feb '23

18 Feb '23

Hello, We've built a solution to scale our onion server horizontally using Kubernetes horizontal autoscaler. It's basically an onionbalance & a set of wrappers to regenerate its config file depending on the set of running TorHiddenService instances. Each time we scale the set of servers up, we start new Tor onion servers on random addresses (that's what onionbalance expects), and their descriptors are then merged into the single one by onionbalance. When we delete old instances, their onion addresses are abandoned. We want to be good citizens and not to clutter Tor's DHT with abandoned records. My question basically is whether the Tor ecosystem automatically deletes abandoned descriptors or not. If yes, we can keep our system simpler. If not, we'll have to make the system stateful and try to reuse our existing onions as much as possible. Thanks.

5 5

Use onion-like domains for a regular websites and DynDNS
by Sergey Ponomarev 02 Aug '22

02 Aug '22

Hello the Tor Community, I have a proposition to build a DynDNS server that will host onion-like addresses for regular websites. And I'll appreciate any feedback, opinions and thoughts on this. I am working on a YurtPage which is a small home page server and kind of light version of NextCloud for inexperienced users. Some users already have an IP static or dynamic so their site can be directly accessed from the Internet. But still they need a domain to be independent from IP changes. Unfortunately domains are controlled by the DNS mafia and they cost money. The NameCoin's .bit domains are cool but they cost money too. So for users I'll implement a Dynamic DNS (DynDNS) so that they'll automatically receive a subdomain of mine's jkl.mn site like SomeonesYurt.jkl.mn And the user's homepage will send ping to jkl.mn so it can detect the public IP and update a DNS record. The problem is that I don't want to have a responsibility to host the DynDNS service. I may forget to renew its domain or hosting, or its server dies or I may die. And I decided to generate an onion-like address so they'll look like http://jklmnyiyjnwfc6aklubg45o4hbkvz5uu47hcwjinbihi4shcucq5aiid.jkl.mn/ I see a few advantages: * In case the jkl.mn disappears users may install a Tor Onion Service and visitors can still open the site by replacing jkl.mn to .onion in links. I'm going to install the Tor Service by default. * I don't need to store a database: a homepage may just sign its request with a private key and the DynDNS can check it and update a DNS record. * Yes, the address is not possible to remember but anyone can save a bookmark or use google to find it. Instead I'll not have cybersquatters who took all the good domains. Anyone can buy a domain and use CNAME if they wish. What do you think about this idea? Will it work? I created a project to develop it https://github.com/yurt-page/dyndns-onion but decided to consult with you first. To go further I think that the remaining problems may also be solved easily. Volontiers may start their own DynDNS servers and exchange the records with each other. The homepage sends a Ticket to any DynDNS server. The Ticket is just an encrypted IP and timestamp and anybody can decrypt it with the public key from the domain. The ticket with last time is considered as actual and every DynDNS server may return its IP. Here may be used other technologies like DHT for a quicker lookup and to be independent if the jkl.mn domain disappears. Similarly to a .bit TLD we may have .dyn that are free to anyone. But unlike .onion domains the .dyn domains are not anonymous and lookups are not blocked on DNS level and can be answered by any. I'm not an expert in DNS and TOR so please tell me if the idea is worth implementing. Regards, Sergey Ponomarev stokito.com

4 3

DDoS attack on hidden service HSDirs
by amethyst0＠riseup.net 08 Jun '22

08 Jun '22

Should I beware of an attack on the 8 HSDir of my onion service? It looks like this is a very bottleneck compared to 160 (8 HSDir * 20 Intro points) tor instances

1 0

Onion Balance 2 Services on Host
by whoisme543 24 Feb '22

24 Feb '22

I was wondering if it's possible to run 2 hidden services on 1 host server? Each service would be using onionbalance.

3 2

Re: [tor-onions] Remote Sensing and GIS in Multi Hazard Early Warning Systems March workshop 2022
by Foscore Development Center Africa 02 Feb '22

02 Feb '22

<http://tracking.fdc-k.africa/tracking/click?d=OH4B-n934LNicidul_h8WBme-KBpS…> Remote Sensing and GIS in Multi Hazard Early Warning Systems March workshop 2022 <http://tracking.fdc-k.africa/tracking/click?d=OH4B-n934LNicidul_h8WBme-KBpS…> Register as individual, Group or Online <http://tracking.fdc-k.africa/tracking/click?d=sreBwoDzYdgj3bOaBCRBsUjfBl7IN…> Download our calender <http://tracking.fdc-k.africa/tracking/click?d=pVt24nBCIBaQhoUk_JoHXFvrRgFR5…> Download our brochure Discount: 20% for 5 and more participants <http://tracking.fdc-k.africa/tracking/click?d=Ejx10kmXP299MP_ue0qsVVgsmeCyC…> Our 2022 onsite Programmes <http://tracking.fdc-k.africa/tracking/click?d=5PkZPp48t-8Hz5sVatBFpn5a3epmX…> Our 2022 online Programmes Centers:Nairobi,kenya|Mombasa,kenya|Rwanda,kigali|Dubai For any inquiry to: training(a)fdc-k.org or +254712260031 or <http://tracking.fdc-k.africa/tracking/click?d=Ejx10kmXP299MP_ue0qsVTTHF5eeJ…> Contact us Website: <http://tracking.fdc-k.africa/tracking/click?d=Uuhk_vr4js18HlPTKSEjJYTZyhsDK…> www.fdc-k.org <http://tracking.fdc-k.africa/tracking/click?d=IuDb5fT4fapGEpKDebKZ5tAUbMyiQ…> Consultacies Introduction Develop the capacity of professionals to design, manage, evaluate and undertake improvements in people-centered early warning systems for hydro-meteorological & geological hazards and extreme events associated with climate change and variability. It builds upon experience in building capacities on use of GIS, Remote Sensing and space based technologies in disaster risk management for disaster management institutions, disaster management practitioners and communities. It aims to institutionalize weather and climate information applications for disaster mitigation. No of Days 5 days Course Objectives Effectively integrate scientific and technical inputs into early warning dissemination and communication system Apply emerging generation climate prediction technologies for anticipating and managing disaster risks associated with climate change & variability Develop strategies to institutionalize early warning systems into the process cycle of disaster risk management and development planning, emergency response, and preparedness activities Develop risk communication & communication technologies Interpret scientific information products into user friendly formats and prepare & communicate tailor made early warning information products Design and implement community based early warning systems that are people centered Evaluate and introduce public education and training program for the community based early warning systems Undertake risk assessment and design of multi-hazard early warning systems for disaster risk reduction Apply GIS and Remote Sensing for designing implementations of large scale early warning systems and Participatory GIS skills for community Early Warning Systems Apply Mobile Data Gathering technologies for rapid assessment and surveys Course Content Multi Hazard Early Warning Systems Concept Concepts and main frameworks in Multi Hazard Early Warning Systems Weather, Climate and Atmospheric Processes Observed Climate Change and Impacts Climate Predictions and Major Sources of Uncertainty Basic concepts of Remote Sensing and GIS Basic concepts of GIS and Remote Sensing in the context of Early Warning Systems Handling spatial information I: (Using Quantum GIS) Spatial Reference Systems & data integration Handling spatial information II: GPS-based field data collection Introduction to Risk Identification and assessment Introduction to Risk Identification and assessment using Spatial Technologies Mobile data gathering for field assessments/surveys using Open Data Kit Handling spatial information III: Visualization of risk information Hazard detection, monitoring, forecasting and warning Spatial information Handling spatial information IV: Satellite image processing techniques for change detection (Using ILWIS) Early warning dissemination and communication Communication protocols Public Participatory GIS Public Participatory GIS Google Earth, Maps Social Networking Integration Community-based early warning systems Building hazard-aware and ready communities Monitoring and evaluation of early warning system General Notes · All our courses can be Tailor-made to participants needs · The participant must be conversant with English · Presentations are well guided, practical exercise, web based tutorials and group work. Our facilitators are expert with more than 10years of experience. · Upon completion of training the participant will be issued with Foscore development center certificate (FDC-K) · Training will be done at Foscore development center (FDC-K) center in Nairobi Kenya. We also offer more than five participants training at requested location within Kenya, more than ten participant within east Africa and more than twenty participant all over the world. · Course duration is flexible and the contents can be modified to fit any number of days. · The course fee includes facilitation training materials, 2 coffee breaks, buffet lunch and a Certificate of successful completion of Training. Participants will be responsible for their own travel expenses and arrangements, airport transfers, visa application dinners, health/accident insurance and other personal expenses. · For any enquiry to: training(a)fdc-k.org or +254712260031 · Website:www.fdc-k.org Other upcoming workshops March 2022(Nairobi,kenya|mombasa,kenya|rwanda,kigali|dubai) · <http://tracking.fdc-k.africa/tracking/click?d=tIMifx0Kva7EFHxO9xQkkphM9ssgv…> Qualitative Data Management and Analysis with NVIVO Workshop · <http://tracking.fdc-k.africa/tracking/click?d=wPeQvwHmmLoHCDhRA1AiLrSqcinm8…> Gender Equity Achievement in Development Projects Workshop · <http://tracking.fdc-k.africa/tracking/click?d=mWWgbi0vXe6yPRvFz51jjH6WiJ5Kf…> Advanced Excel Formulas and Functions Workshop · <http://tracking.fdc-k.africa/tracking/click?d=FZZ3aPiKa1myz1TMyCycKD1YIkh0R…> Transformational Leadership and Governance Workshop · <http://tracking.fdc-k.africa/tracking/click?d=c3PGsqiQbbESSbMsNwcCligorzJ2C…> Project Information Management System for Development Organizations and NGOs Workshop · <http://tracking.fdc-k.africa/tracking/click?d=H0J4oi_ev6a97xOQ5Y-4mK4Yu55YW…> Human Resources Management, Development and Auditing Workshop · <http://tracking.fdc-k.africa/tracking/click?d=t8bLBao3SFwllxaf1Auvw35xhifF3…> GIS Application in Disaster Risk Reduction Workshop · <http://tracking.fdc-k.africa/tracking/click?d=nOc8Q6-GnKVUIpgRPHvuCLjOnOA5s…> Data Analysis, Modeling and Simulation using Excel Workshop · <http://tracking.fdc-k.africa/tracking/click?d=5ymmgILBioohUWxkmP_PF0B91Iwg4…> Quantitative Data Management and Analysis with STATA Workshop · <http://tracking.fdc-k.africa/tracking/click?d=rW7kv9ae3RIZGNLEJPAmbGoIzbaxW…> Developing organization Balanced Scorecard Workshop · <http://tracking.fdc-k.africa/tracking/click?d=t8bLBao3SFwllxaf1Auvw35xhifF3…> Public Health in WASH during Emergencies Workshop · <http://tracking.fdc-k.africa/tracking/click?d=OH4B-n934LNicidul_h8WBme-KBpS…> Mobile Data Collection using ODK & KoboToolBox Workshop · <http://tracking.fdc-k.africa/tracking/click?d=n5QsPhcSIVEuV6nPXhu9Q-nWP_px-…> Transforming, analyzing & visualizing data with Microsoft Power BI Workshop · <http://tracking.fdc-k.africa/tracking/click?d=H0J4oi_ev6a97xOQ5Y-4mK4Yu55YW…> Quantitative Data Management and Analysis with R Workshop · <http://tracking.fdc-k.africa/tracking/click?d=PLHBK13ZiUz4wMGdvTQFAUfuVFzOd…> Quantitative Data Management and Analysis with SPSS Workshop · <http://tracking.fdc-k.africa/tracking/click?d=Cx2ZrnJt4yTljRF3LlbR1H-U8CsOE…> Strategic Communication Training For Managers And Executives Program Workshop · <http://tracking.fdc-k.africa/tracking/click?d=pUURyvNiirv2cW4yWUEurFQMqbD1_…> Grant Management using Sun Accounting System Workshop · <http://tracking.fdc-k.africa/tracking/click?d=l2HoI7v5Q4GUl3zv2--ZKIIku3PDQ…> Research Design, ODK Mobile Data Collection, GIS Mapping, Data Analysis using NVIVO and SPSS Workshop Regards FDC Training Team For any inquiry to: training(a)fdc-k.org or +254712260031 or <http://tracking.fdc-k.africa/tracking/click?d=Ejx10kmXP299MP_ue0qsVTTHF5eeJ…> Contact us <http://tracking.fdc-k.africa/tracking/unsubscribe?d=zcC7ZoHWKaH3BVWDkR1BqVS…> UNSUBSCRIBE

1 0

Onion Service Monitoring
by shadow 16 Aug '21

16 Aug '21

Dear fellow Onion Service operators, I'm curios how you monitor the availability of your onion services? I implemented a solution with icinga2 check commands. It basically queries the onion service via torsocks and check_tcp command [1]. > > object CheckCommand "check_tor_onion" { > command = [ "torsocks", PluginDir + "/check_tcp" ] > timeout = 6m > arguments = { > "-H" = "$hostname$" > "-p" = "$port$" > "-t" = "$timeout$" > } > } This solution is kind of flaky and produces a lot of mail noise, even if I run it with large timeout value (360s), check attempts and retry intervals. Recently I came across the tool called hsprober [2], which looks like a more compelling option. though it requires a prometheus setup. Since it is a network, where connections constantly looses connections, I would like to know how you treat this flakyness. Regardless of which software stack you use, I'm interested in your concept for monitoring your onion services from the outside (user side) and from the inside (server side). And also which tools do you use. Thank you for any answers and opinions. Have a happy new year. shadow [1] - https://www.monitoring-plugins.org/doc/man/check_tcp.html [2] - https://git.autistici.org/ale/hsprober -- best regards | viele Gruesse, shadow(a)systemli.org receive my key: gpg --keyserver zimmermann.mayfirst.org --recv-keys 0x5C6B6ED4248C1F32

7 11

HELP
by madhatton＠shaw.ca 03 Aug '21

03 Aug '21

my name is Mike Hatton I live in a small town called Powell River, BC Canada I am in my eighties somewhat disabled hearing is going slowly I am in my twenties mentally and a body about the same age as planet earth, and being as I am not a geek should I perhaps not try to get onion V3 confusion isn't new to me. Peace be with you Mike

1 0

Matrix/Synapse as Onion Service
by shadow 10 Jul '21

10 Jul '21

Hey all fellow list members, does anyone of you has been able to set up Matrix / Synapse / Element as an onion service? There are are open tickets regarding this: * https://github.com/matrix-org/synapse/issues/5152 and also a Cloudflare level implementation: https://blog.cloudflare.com/cloudflare-onion-service/ But I wonder if anyone of you already set it up and what your experience have been with it. To me it looks like, that there are multiple problems and several layers (depending on your Matrix Setup). For example if you use the ansible roles for setting up matrix in a docker environment (https://github.com/spantaleev/matrix-docker-ansible-deploy) Have a nice sunday afternoon, shadow // systemli.org

3 4

Idea for tor relays
by Mr. MemeProducer 12 Jun '21

12 Jun '21

Dear sir/madam I have a idea for tor relays. How a normal man can afford to run a computer 24/7 with Internet and for relays. So, my idea is that most people have a router/mordem and it have a website on it so if relay software is written in java script it can run on it or it has its own os if device is connected to it will not take relay request but if no device is connected it will run as relay Your user, Padmanabh kharat

1 0

Re: [tor-onions] Testing 0.2.9 (and Single Onion Services)
by Michael Lightfritz 05 Jun '21

05 Jun '21

1 0