Live data from Hacker News

MoreOnionsPorfavor: Onionize your website and take back the internet

blog.torproject.org

91–100 of 151 posts

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#91
I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" in the UK, which had put me on a blacklist for unknown reasons (they don't tell you the reason for security reasons, but there was mention of something "proxy"). After submitting multiple requests to remove me from their blacklist (all automated online with no option to talk to a human), I finally caved in and shut down my relay. After doing that, combined with waiting a few days, while also continually resubmitting my removal request, they marked my IP as "clean", allowing me to login to my bank again. The whole process took about 6 weeks, and neither my bank nor the UK service provided any assistance along the way. Fun times.

I would love to run a TOR relay again but I'm a bit paranoid now.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#92
post #80

So let's say I run a few websites and do support the idea. I read that article and think "I should setup an .onion version of my site and then point to that". The article points to https://community.torproject.org/onion-services/setup/ - and I'm immediately lost. Setup a local webserver? Why would I need that? The documentation mentions that I have to configure the webserver correctly, but offers no details about tha…

[deleted]

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#93

I remember, in 2014, Facebook started to be available on Tor, and people speculated that there will be a wave of popular websites being offered on Torspace. Nothing came of this "wave", if I'm not wrong, right. https://en.wikipedia.org/wiki/Facebookcorewwwi.onion edit: and it seems down to me right now. edit2: it works... but slower, than just going to regual HTTPS version with Tor. Which makes sense, because it need…

I still use Facebook via Tor quite often, even though it's barely usable - loading anything takes between 3 and infinite seconds (i.e. never loads, requiring multiple refreshes). I use it to let them know that people still use it, with the hopes that they don't even remove it. I don't have this problem with other Tor sites, so it leads me to believe they want to be able to advertise it as "we offer this because we care" while making it nearly unusable to the point that nobody will use it. It's very similar to the secure chat feature, which they continually move deeper and deeper into menus, each move progressively more difficult to find. They just yesterday enabled the new "layout", and I can't even find the secure chat feature anymore, they either buried it so deep or removed it entirely?

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#94

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

That's pretty scary

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#95
post #35

Earlier quoted context omitted.

The Onion really needs an .onion site.

They really should, the.onion would almost be perfect.

Names under the .onion TLD are random (they're derived from a public key, and you should generate your key pair randomly or else your private key isn't private). You can of course just keep picking random names until you get one that you like, but "the" isn't a possibility even if you kept trying forever.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#96
post #80

So let's say I run a few websites and do support the idea. I read that article and think "I should setup an .onion version of my site and then point to that". The article points to https://community.torproject.org/onion-services/setup/ - and I'm immediately lost. Setup a local webserver? Why would I need that? The documentation mentions that I have to configure the webserver correctly, but offers no details about tha…

it's possible they're trying to avoid a monoculture of web servers that serve tor sites in order to avoid many sites becoming insecure in the event of a bug disclosure for a software package they have no control over

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#97
post #80

So let's say I run a few websites and do support the idea. I read that article and think "I should setup an .onion version of my site and then point to that". The article points to https://community.torproject.org/onion-services/setup/ - and I'm immediately lost. Setup a local webserver? Why would I need that? The documentation mentions that I have to configure the webserver correctly, but offers no details about tha…

They're not a tech support company or a hosting company. There are literally thousands and thousands of documents on basic web server installation and configuration already written. The information is trivial to find. It falls under "if you have to ask, you're not ready".

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#98

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

Why on earth would you run a Tor node on an IP that you use for any personal transactions? This isn't surprising in the least.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#99

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

I wonder if you had just waited without turning it off the result would have been the same.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#100

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

run it on a vps if you have one
Post reply on HN