Onion Services Guides
Donate
| About this Onion Services Guides Page This wiki page is maintained by a contributor. | |
|---|---|
| Support Status | stable |
| Difficulty | medium |
| Contributor | HulaHoop
|
| Support | Support |
Documentation for this is incomplete. Contributions are happily considered! See this for potential alternatives.
None of the following guides are adjusted to work with Whonix. [1]
Introduction[edit]
To make your service better known it can be listed on ahmia.fi - a public directory of Onion sites that works closely with The Tor Project.
General Tips[edit]
Some very useful information on scaling onion sites was published in an article series on the Tor blog, see: Cooking with Onions: Finding the Onionbalance.
For creating a production level onion mirror of your clearnet site, refer to some tips in this tor-talk forum discussion: New Document: Building a "Proof of Concept" Onion Site.
Onion Services Guides[edit]
GlobaLeaks[edit]
Security warning: Adding a third party repository and/or installing third-party software allows the vendor to replace any software on your system. Including but not limited to the installation of malware, deleting files and data harvesting. Proceed at your own risk! See also Foreign Sources for further information. For greater safety, users adding third party repositories should always use Multiple Whonix-Workstation ™ to compartmentalize VMs with additional software.
Installation Guide from GlobaLeaks third party repository
This is a guide to help you set up your own secure and anonymous whistle blowing platform. Note that this is a standalone node and not part of a network, although you can optionally list yourself in the Leaks Directory.
To decide between GlobaLeaks and SecureDrop read this detailed comparison written by a Tor Project developer.
Multiplayer Onion Gaming[edit]
See: Onion Gaming.
SecureDrop[edit]
SecureDrop is another widely used whistle-blowing platform installed at many news organizations. To set it up please refer to the official guide. To use SecureDrop as a source, refer to this documentation and for using SecureDrop as a journalist go here. For general information and project code go to their main GitHub page.
If you are a news or whistle-blowing site operator you may be interested in having your Onion Service address listed at the Freedom of The Press Foundation.
[edit]
For a private and anonymous DropBox alternative you can run Sparkleshare as a Onion Service. To ensure that only you and the intended parties can access the service you need to set up Onion Service Authentication, see instructions.
SSH[edit]
Secure Shell is the dominant protocol for secure remote login and system administration. It is a critical component of server and internet infrastructure. Revelations from the Snowden documents and further analysis [2] has uncovered weaknesses in some of the included cipher-suites, allowing abuses by resourceful nation-state adversaries. If you run SSH in this day and age, it should be done from behind a Tor Onion Service.
Advantages:
- protection by Tor
- robust access control provided by Onion Services authentication [3]
- NAT traversal
- no need for services like DynDNS
- Setup Onion Service Authentication.
- Run SSH like normal or follow this guide if you are a beginner.
Stormy[edit]
Stormy is a simple Onion Service blog setup script. The developer hopes to have it packaged for Debian at some point, but it is under heavy development at the time of writing (only suitable for developers). To learn more, see: GitHub.
See Also[edit]
References[edit]
- ↑
https://forums.whonix.org/t/onion-services-guides/6587/12
- ↑ https://stribika.github.io/2015/01/04/secure-secure-shell.html
- ↑ Shields SSH from brute-force attacks and exploit attacks against the SSH server daemon.
At
Whonix we believe in freedom and trust. That's why we fully support Open Source and Freedom Software.
Whonix ™ is supported by Evolution Host DDoS Protected VPS.
ENCRYPTED SUPPORT LP,
2023