Tor - The Onion Router

1465 readers

1 users here now

Tips, tricks and information about the Tor network!

Tor Project

founded 4 years ago

MODERATORS

imattau@lemmy.ml

Why are onion services not widely used? (lemmy.dbzer0.com)

submitted 3 months ago by fran@lemmy.dbzer0.com to c/tor@lemmy.ml

28 comments fedilink hide all child comments

It amazes me that onion sites aren't everywhere. They are easy to spin up, you don't have to pay anything and can run it from your own home. No need to purchase a domain, worry about expiration, have an open port. Built-in DoS protection. Anonymity and authentication by default. No need to configure HTTPS. Sure, uptime is on you and there is some latency/bandwidth limits to be considered, but once you are over that, onions are a solution to many problems and the benefits are enormous.

you are viewing a single comment's thread
view the rest of the comments

[–] 0x0@programming.dev 4 points 3 months ago (2 children)

and can run it from your own home.

A risk most people aren't willing to take lightly?

[–] mp3@lemmy.ca 11 points 3 months ago (3 children)

Running an onion service is generally much less risky legally speaking than a Tor exit node.

[–] aviation_hydrated@infosec.pub 6 points 3 months ago (1 children)

Is it legality or security? I personally wouldn't want a public facing service on my home network without extensive hardening

[–] Plopp@lemmy.world 3 points 3 months ago (1 children)

I mean, you could segment it off.

[–] aviation_hydrated@infosec.pub 1 points 3 months ago (1 children)

Would that mean just an extra router + WiFi using the same ISP?

[–] Plopp@lemmy.world 1 points 3 months ago (1 children)

There are many ways to do it with varying levels of security, but an extra router/firewall would be preferable, yes. And yes using the same ISP.

[–] aviation_hydrated@infosec.pub 1 points 3 months ago

Thank you for the clarification

[–] 0x0@programming.dev 3 points 3 months ago (1 children)

I'm more worried about opening up a port in my home network.

[–] Edie@lemmy.ml 9 points 3 months ago* (last edited 3 months ago) (2 children)

You don't. The tor service connects out to a node. This is also nice because it means you can run it behind nat and firewall and whatnot without problems.

[–] 0x0@programming.dev 4 points 3 months ago

I'd still have to read up on it and, at the very least, containerize it and preferably use a home router that supports VLANs.

[–] mojofrododojo@lemmy.world 0 points 2 months ago (1 children)

just gotta say, I find it hilarious that an outspoken advocate for russian communism uses TOR.... which was created to aid democracy advocates in authoritarian states. with funding from the US gov.

bwahahahahaha

[–] Edie@lemmy.ml 3 points 2 months ago* (last edited 2 months ago) (1 children)

"Democracy" advocates... "Authorian" sure. I guess there is a reason I stopped using it.

Also its Marxism-Leninism, not Russian communism.

[–] mojofrododojo@lemmy.world 1 points 2 months ago

buddy it doesn't matter what label you put on the turd, it still stinks.

[–] whydudothatdrcrane@lemmy.ml 2 points 3 months ago

Sorry but for someone who knows just what the Wikipedia intro says about TOR, and having used it like once, I just thought it takes forever to load broken sites just for the benefit of some allegedly improved privacy. I figured it is only useful to people who want to browse illegal sites, but does this mean that any hidden website is illegal? Just for the sake of argument if someone hosts an old-fashioned HTML site about his fucking hobby, will they face legal repercussions just for serving it as a hidden webpage? I can't fathom that.

[–] fran@lemmy.dbzer0.com 4 points 3 months ago (1 children)

If you don't share the onion link with others and just use it for yourself, no one ever discovers it, unlike the public internet where you get crawled by port scanners all the time. Also there is a public key whitelist feature if you want to restrict who connects.

[–] VirtualOdour@sh.itjust.works 3 points 3 months ago (2 children)

That's actually a really useful feature for me, how much processor does it need? Can a raspberry pi run it?

[–] fran@lemmy.dbzer0.com 2 points 3 months ago

The Tor client itself is lightweight. It's the application you want to run behind the onion service (http server, etc.) that is probably going to limit you in terms of hardware. You can run an onion service on a Raspberry Pi. Any version in fact, even the first one.

[–] aviation_hydrated@infosec.pub 1 points 3 months ago* (last edited 3 months ago)

I think OnionShare can run on an RPi, which is a FOSS prebuilt web service