r/TOR

Hey guys i wanted to know if its ok to use tor for searching things normally like i do in chrome/firefox?

On Tor never had a problem disabling Java when accessing sites that didn’t support Java or picked up if it was enabled and only allowed traffic from Java disabled users.

First time since the update of noscript (at least that I noticed) and I thought that was the issue. All of a sudden I couldn’t access stuff anymore because “you have JavaScript enabled”. But I don’t. Can’t find a solution. Any others experiencing this?

Launched my first hidden service about 6 months ago after only ever building clearnet stuff. Learned a bunch of things the hard way that nobody really tells you upfront, so here's the honest version.

The tech is way less special than i expected

This surprised me the most. I built it up in my head like onion hosting was some dark art. Its not. Its basically the same stack as a normal site, same web server, same input validation, same everything you'd do to secure any site. The onion part is just how its reached. If you can build a secure clearnet site, you can build an onion site, its genuinely almost identical.

The one real difference in practice is more of your visitors have javascript disabled, so if your site falls apart without JS you're gonna lose people. Build it to work without JS from the start.

The hard part isnt building it, its being found

This is the thing i completely underestimated. On the clearnet you have google. Here theres no crawler ranking you, no SEO in any normal sense. Nobody is going to stumble onto your site.

Discovery happens through directories, wikis, curated link lists and word of mouth. Getting listed in the right places is basically the entire game. I spent way too long polishing the site before realizing nobody could find it. Should have thought about discoverability from day one.

Your address is unreadable and thats a real problem

The v3 onion address is a huge random string. Nobody types it, nobody remembers it, nobody can tell a real one from a fake one at a glance. I used mkp224o to grind out a vanity address that at least starts with a recognizable word, which helps a little, but its still mostly gibberish after that. So people relying on links from places they already trust matters a lot. Your reputation and where you're linked from is your whole identity here.

Uptime and not leaking your IP are the two things that actually bite you

Two lessons that cost me some pain.

First, uptime. If your host goes down your onion is just gone, no cached version, nothing. So where you run it matters more than on the clearnet. I went through a couple options before settling, tried running it at home first (dont, your home connection and a dynamic setup will fight you), then landed on a proper always-on host. For anyone piecing a setup together, the parts that mattered for me were a stable always-on server, a host that doesnt care about tor traffic and keeps no logs, im on privatealps the tor daemon itself, Vanguards running to protect against guard discovery attacks, and a hardened web server. Nothing exotic, just the standard hidden service hygiene.

Second, leaking your real server IP. This is the classic footgun. If your server also answers clearnet requests, or leaks its IP in headers or error pages, the whole point of the hidden service is gone. Make sure it only talks through tor and doesnt respond on the clearnet at all. Worth triple checking this one.

What id tell someone starting now

Dont overthink the tech, its normal web dev. Think about discoverability from day one, not after. Build without JS. And nail your uptime and your IP hygiene before you worry about anything fancy.

Its a fun thing to run honestly, you learn a lot. Anyone else here hosting their own, what caught you off guard when you started? Curious if others hit the same walls.

so i tried to download tor but theres no option for chrome os on tor project so whats the work around dont tell me linux unless you can give me the actual run down

It was only failing for private ones, public ones worked, so i opened it in tor browser alpha it also worked the same and failed for private ones, then I did it on laptop and it worked for both public ones and private ones in both windows and linux, (as I am a dual boot user of windows and ubuntu),

Can I fix it? Or is there some problem that phones can't access the ones with private keys?

jus wondering, its kinda annoying trying to watch a movie on the phone with tor lol

[supprimé]

hello,

use the Tor Browser from 1 year, but i want to help people browse safely, I have an extension in Firefox from Snowflake, I have an old PC and I wonder, if I always leave it on with Firefox open, with the extension I will be helping.

Greetings!

Picking up a cheap HP laptop that runs Windows and I plan to Rudolph using tails operating system system on a flash drive to access TOR.

Coffee shop fast food joint

Purchase a VPN

Where do I begin to find out how to do this correctly?

Hey guys, I’ve just set up my first site on the Tor network using plain HTML/CSS. Done the basics: set up standard titles, proper header tags, and optimized the text content. I’ve also manually submitted the .onion address to a few search engines like Ahmia.

What else can I do specifically for Darknet SEO to improve visibility and indexing without paying for forum/search engine promotions? 

Are there specific darknet search engine quirks, uptime metrics, indexing tricks, or directory structures that work best in Tor? Would love to hear your experiences and tips! Thanks in advance.

Hi people is there any app like onion share for android because it's not available for some reason

When I first heard of the dark web it sounded cool mysterious & sexy, like an exclusive club or something. In my mind I thought it was going to be a pirating paradise full of pirated movies, games, mods, where nothing is monetized and everything is free. And boy was I disappointed lol. I still like the concept of the dark web, I just struggle understanding the benifits vs clearweb. Besides privacy, or if your in a country that censors the internet.

https://preview.redd.it/2skwzzrfy5jh1.png?width=1204&format=png&auto=webp&s=f78a7e599fbe88984d972e26cddfcc5ccd1bd74e

i allowed canvas data but i still cant upload, how can i fix it? I tried reloading page or not reloading, but still cant upload. Can someone help me

guys, is there another way to make onion site on android instead of using termux or shttps + orbot?

Why would a site's chat box not come up when using Tor?

i have tor now, its literally like any other browser wth????? what do you do there that you cant on a vanilla browser

I downloaded ProtonVPN, Proton Mail and Tor Browser. When i use Tor Browser and VPN together my internet becomes non-usable.

I have to choose between only Tor or only VPN

If ProtonVPN able to provide anonymity, why should i use Tor on top of it?

If Tor able to provide anonymity, why should i use ProtonVPN on top of it?

What are advantages of using only Tor, Only VPN, Tor + VPN together?

My thread model is Reddit, Facebook, X, Youtube etc. social medias not able to provide informations about me to goverment.

I am really sorry to keep bothering you all.

The latest "gossip" on certain boards which has me concerned is talk about a de-anonymization timing attack using a compromised CAPTCHA service (or other service which controls the speed at which a series of images is loaded).

Apparently, they monitor outbound traffic from (I guess all?) known guard nodes, and do timing correlation? No Javascript exploit required, and they don't even need to compromise the target site itself, as long as they control the CAPTCHA it uses. Is there any evidence that this actually works and is being used?

EDIT: This seems to me like a variation on the "classic" correlation attack, described here, which apparently Tor specifically isn't designed to protect against? Or am I misunderstanding?