[tor-talk] Question regarding forum software for use as a hidden service

[Eugen Leitl]

On Thu, Mar 15, 2012 at 07:06:55AM -0400, andrew at torproject.is wrote:
> On Thu, Mar 15, 2012 at 10:00:04AM +0000, jason.cooper at heckrothindustries.co.uk wrote 1.0K bytes in 30 lines about:
> : So far the key issues standing out about forum software best suited
> : for running a forum as a hidden service is
> : 
> :   * it needs to be easy to security audit
> :   * low bandwidth requirement (Use of CSS over images)
> :   * avoid php if possible
> :   * Developed using best practice to avoid secruity holes (though
> : some will most likely exist)
> 
> It will be interesting tos ee what existing forum software meets all of
> these requirements.

I think it is good practice to confine hidden services to
virtual compartments, especially on hardened machines
preventing easy escape in case of guest compromise.