Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MoreOnionsPorfavor: Onionize your website and take back the internet

blog.torproject.org

Post reply on HN
Print view View original

111–120 of 151 posts

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#111

Post by maxmouchet »

glenneroo wrote: post #91

I'm not sure how relevant this is to running your website on the "darknet", but a potential warning for future Tor service operators: I ran a TOR relay for about a year, eventually even ordering a static IP for 5€/month. One random day, I was unable to log into my online banking, receiving some obscure error code. After digging around and finally contacting the bank, they referred me to some "IP protection service" i…

I had a similar experience with my Xiaomi (robotic) vacuum cleaner. A few days after setting-up a tor relay (not an exit node!) on my home connection, my vacuum stopped working. The "Mi Home" app, which communicates with the vacuum via a server in China, was unable to find the vacuum.

A traceroute to the Xiaomi servers revealed that my packets were dropped somewhere in the ChinaNet AS. I stopped my relay and everything went back to the normal a few days later.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#112

Post by 0xggus »

woofie11 wrote: post #33

I want a short HOWTO linked from this article.

Just follow the guide below and ping us on IRC (irc.oftc.net #tor) if you have issues:

https://community.torproject.org/onion-services/advanced/oni...

IRC help: https://support.torproject.org/get-in-touch/irc-help/

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#113

Post by SuoDuanDao »

daenz wrote: post #2

I'm pro decentralizing the internet, but these movements really need some marketing chops. ".onion" TLD? (Yes I know it has been around for awhile) Think of how a normal person will view a ".onion" domain name. It's nonsensical to the uninitiated.

Keeping out the riff-raff is a time-honoured marketing strategy on the internet. Gmail/Facebook invites, You do not talk about /B etc.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#114

Post by 0xggus »

surround wrote: post #10

What’s the advantage of accessing an onion service (as opposed to accessing a normal https website over tor)?

Location hiding

An onion service's IP address is protected. Onion services are an overlay network on top of TCP/IP, so in some sense IP addresses are not even meaningful to onion services: they are not even used in the protocol.

End-to-end authentication

When a user visits a particular onion, they know that the content they are seeing can only come from that particular onion. No impersonation is possible, which is generally not the case. Usually, reaching a website does not mean that a man-in-the-middle did not reroute to some other location (e.g. DNS attacks).

End-to-end encryption

Onion service traffic is encrypted from the client to the onion host. This is like getting strong SSL/HTTPS for free.

From here: https://community.torproject.org/onion-services/overview/

And there's another good reason for the Tor network: if you run an onion service, the traffic will use only Tor non-exit nodes in the circuit, giving a relief to the exit nodes.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#115

Post by gowld »

neilv wrote: post #55

I tried this feature of Tor Browser, using the first example I saw in TFA (www.propublica.org)... and was surprised to see that the .onion equivalent of the www.propublica.com home page... tried to make requests to third-party non-.onion cross-site surveillance trackers. google.com/recaptcha connect.facebook.net static.chartbeat.com ak.sail-horizon.com pi.pardot.com htlbid.com A separate concern, besides this choice…

Because not everyone solves every problem in the world simultaneously.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#116

Post by gowld »

SuoDuanDao wrote: post #113
daenz wrote: post #2

I'm pro decentralizing the internet, but these movements really need some marketing chops. ".onion" TLD? (Yes I know it has been around for awhile) Think of how a normal person will view a ".onion" domain name. It's nonsensical to the uninitiated.

Keeping out the riff-raff is a time-honoured marketing strategy on the internet. Gmail/Facebook invites, You do not talk about /B etc.

The design of .onion is that it only works if the riffraff are in.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#117

Post by john4534243 »

Majority of the ISP's provide dynamic IP these days and getting static ip costs significantly more money. If you have a low compute device like raspberry pi running 24/7 which controls all the home network, then connecting(ssh) to it over internet requires static ip. The other alternative which does not cost money is setting up tor(which is pretty simple) and ssh socks proxy on the client machines. This use case is pretty common which does not involve privacy but very useful.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#118

Post by gowld »

jimbob45 wrote: post #14
jmkb wrote: post #11

Earlier quoted context omitted.

Last century "network" and "web" were metaphors that meant nothing to the uninitiated -- I feel that ".onion" has a shot.

Just realized network is a metaphor.

And network is a synonym for web, distinguished only by usage, not intrinsics.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#119

Post by gowld »

jakereps wrote: post #30
daenz wrote: post #2

I'm pro decentralizing the internet, but these movements really need some marketing chops. ".onion" TLD? (Yes I know it has been around for awhile) Think of how a normal person will view a ".onion" domain name. It's nonsensical to the uninitiated.

A normal person won’t be able to access an onion site, let alone care about the pop up they’re getting about its availability. I’ve watched people navigate web pages with the half screen cookie banner still open. Tor is not targeting a “normal” person, as the media has already told the “normal” people that the only things available on the “dark”/“deep” web are illegal.

Tor doesn't work unless normal people usage it. Users need the camouflage normal users provide.

Re: MoreOnionsPorfavor: Onionize your website and take back the internet

#120

Post by bzb3 »

glenneroo wrote: post #105
caymanjim wrote: post #98

Earlier quoted context omitted.

Why on earth would you run a Tor node on an IP that you use for any personal transactions? This isn't surprising in the least.

Excuse my ignorance, but why should I not be allowed to run a Tor relay (not an exit node!) at home when I have sufficient bandwidth and purchased a static IP through my IP which they advertise even "to allow running of private servers"? I thought one of the points of the article was the propagation and subsequent democratization of Tor/Onion sites? If I have to rent a VPS to run a node, isn't half the point defeated…

You're allowed, but you will be blacklisted by many services...

I also agree that it shouldn't be a problem if you're not an exit node, but that's the way it works.

Post reply on HN