Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MoreOnionsPorfavor: Onionize your website and take back the internet

blog.torproject.org

Post reply on HN
Print view View original

101–110 of 151 posts

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#101

Post by 2038AD »

warent wrote: post #44
nsl73 wrote: post #34

Earlier quoted context omitted.

There is a scene in Shrek where he compares himself to an onion because he was emotional layers.

Shrek is an old meme and onions are stinky. Do you think that's a recipe for this to catch on by the next generation? It's a miracle .com worked at all, and I wouldn't hold my breath for a second miracle.

> Shrek is an old meme and onions are stinky. Do you think that's a recipe for this to catch on by the next generation?

Yes, older members of Gen Z have already been enjoying Shrek "post-ironically" for years. Younger members of the generation are editing together clips of teenagers from the 00s as though it were some bygone halcyon era. Whether we like it or not the trends of reference and farce seem to be accelerating.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#102

Post by glenneroo »

tarkin2 wrote: post #99
glenneroo wrote: post #91

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

I wonder if you had just waited without turning it off the result would have been the same.

I sometimes wonder the same! The problem was at the time that I dread going to the bank to do anything (and I tend to do a lot of transactions, especially recently due to certain events).

I will definitely repeat the "experiment" in the near future, just as soon as it is feasible.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#103

Post by glenneroo »

nyolfen wrote: post #100
glenneroo wrote: post #91

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

run it on a vps if you have one

I assume that isn't free? And more importantly, is that even supported/allowed by VPS services? I'm definitely open to suggestions!

EDIT: As I mentioned in another comment:

> I thought one of the points of the article was the propagation and subsequent democratization of Tor/Onion sites? If I have to rent a VPS to run a node, isn't half the point defeated?

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#104

Post by viraptor »

caymanjim wrote: post #98
glenneroo wrote: post #91

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

Why on earth would you run a Tor node on an IP that you use for any personal transactions? This isn't surprising in the least.

I think you're confusing a relay and an exit node here. Pretty much everyone using Tor runs a node and for virtually everyone it's on IP also used for personal transactions. There are silly services which take every tor node as suspicious. They're wrong, but it doesn't matter if you get banned.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#105

Post by glenneroo »

caymanjim wrote: post #98
glenneroo wrote: post #91

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

Why on earth would you run a Tor node on an IP that you use for any personal transactions? This isn't surprising in the least.

Excuse my ignorance, but why should I not be allowed to run a Tor relay (not an exit node!) at home when I have sufficient bandwidth and purchased a static IP through my IP which they advertise even "to allow running of private servers"? I thought one of the points of the article was the propagation and subsequent democratization of Tor/Onion sites? If I have to rent a VPS to run a node, isn't half the point defeated?

IMO the real issue is that my bank is reckless for picking a shitty UK service (who don't even speak our local language - just imagine some poor soul getting blocked because someone else running a Tor node over DHCP).

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#106

Post by glenneroo »

viraptor wrote: post #104
caymanjim wrote: post #98

Earlier quoted context omitted.

Why on earth would you run a Tor node on an IP that you use for any personal transactions? This isn't surprising in the least.

I think you're confusing a relay and an exit node here. Pretty much everyone using Tor runs a node and for virtually everyone it's on IP also used for personal transactions. There are silly services which take every tor node as suspicious. They're wrong, but it doesn't matter if you get banned.

I also considered bringing up that point, but then I actually looked it up[0]:

> Tor relays are also referred to as "routers" or "nodes." They receive traffic on the Tor network and pass it along. Check out the Tor website for a more detailed explanation of how Tor works.

[0]: https://www.eff.org/torchallenge/what-is-tor.html

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#107

Post by easterncalculus »

caymanjim wrote: post #97
onli wrote: post #80

So let's say I run a few websites and do support the idea. I read that article and think "I should setup an .onion version of my site and then point to that". The article points to https://community.torproject.org/onion-services/setup/ - and I'm immediately lost. Setup a local webserver? Why would I need that? The documentation mentions that I have to configure the webserver correctly, but offers no details about tha…

They're not a tech support company or a hosting company. There are literally thousands and thousands of documents on basic web server installation and configuration already written. The information is trivial to find. It falls under "if you have to ask, you're not ready".

Have you actually run a hidden service before?

Running a default or standard configuration of the bigger web servers like Apache or NGINX is a terrible idea if you're actually trying to hide the identity of your server. Setting up a secure hidden service usually requires that several default or common features be disabled, if one actually wants to hide the location of the service.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#108

Post by 0xggus »

onli wrote: post #80

So let's say I run a few websites and do support the idea. I read that article and think "I should setup an .onion version of my site and then point to that". The article points to https://community.torproject.org/onion-services/setup/ - and I'm immediately lost. Setup a local webserver? Why would I need that? The documentation mentions that I have to configure the webserver correctly, but offers no details about tha…

Yes, we are aware of some flaws in the current documentation that have been migrated from the old site to the new site. Very soon we will improve this.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#109

Post by mark_l_watson »

rapnie wrote: post #58
mark_l_watson wrote: post #27

Earlier quoted context omitted.

I understand. Still, I feel better using ProtonMail than FastMail, and I consider FastMail to be preferable to gmail. I also feel better only touching Twitter, Reddit, and Facebook in a private browsing tab. I understand that they can to some extent still use my data to make money for themselves and not share any back with me. I understand that even limiting the data collected in me, I am still subject to nudging, he…

Instead of Twitter you could use Nitter [0] for reading and use Invidious [1] instead of YouTube. There is also a privacy-friendly Insta client, but I forgot which one. I often take the effort to convert the URL's to these sites before sharing with others (there are plugins that do this automatically). [0] https://nitter.net/about [1] https://invidio.us Also check https://switching.software

Thanks, great resources. I must admit to having never seen these three sites before.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#110

Post by 0xggus »

coolspot wrote: post #45
tomrod wrote: post #41

Earlier quoted context omitted.

Naive question, as I am not a security professional. Why?

In some businesses it is important that all employee communications are captured and can be inspected in case there is suspicion of IP or customer data theft. For example in a hospital, there is no good reason for employee to use Tor on work computer.

>For example in a hospital, there is no good reason for employee to use Tor on work computer.

"I'm a doctor in a very political town. When I have to do research on diseases and treatment or look into aspects of my patients' histories, I am well aware that my search histories might be correlated to patient visits and leak information about their health, families, and personal lives. I use Tor to do much of my research when I think there is a risk of correlating it to patient visits. - Anonymous Tor User"

From here: https://blog.torproject.org/remote-work-personal-safety

Post reply on HN