10 ms·
Just use Tor bundle and that’s it. The only way you can shoot yourself in foot is if you use flash uploader and that bypasses Tor (fortunately plugins are disab
by deno 14y ago
Just use Tor bundle and that’s it. The only way you can shoot yourself in foot is if you use flash uploader and that bypasses Tor (fortunately plugins are disabled in Tor bundle AFAIK).
Seeding via Tor? You need to configure Torrent client to use Tor, make sure it doesn’t leak anything (DNS lookups, publishing to DHT or tracker, some stuff on the protocol level was a problem as well). There’s nothing that comes working out of the box. Of course it’s not rocket science, it’s just a bit more work.
Hosting just via hidden service is actually worse than uploading to random locations on clearnet:
1) Still no way to do load balancing with hidden services
2) It’s usually slower anyway
3) If your server gets compromised you’re toasted, unless you use hacked servers, or buy your servers with Bitcoins or stolen CCs.
The best network for publishing that kind of leaks would be Freenet or I2P + Tahoe. But those are not nearly as popular (and secure) as Tor.
- dfc 14y agoI was assuming someone from anonymous could handle figuring out how to setup tor to seed. More importantly hosting via hidden service is not worse than uploading to depositfiles. Hidden services protects both the uploader's and the downloader's anonymity and it is much, much, much more resistant to censorship. I am not sure what "hosting gets breached" has to do with the discussion.
- deno 14y agoI guess it’s not a major issue when just hosting some static content, but still if someone gets access to your server sitting behind Tor, you better make sure you don’t have any activity that can tie you to that server. This is how some people running CP sites via Tor were caught.
- dfc 14y agoIn order to get access to your server they need to circumvent the anonymity that tor provides. Hopefully if you go through the trouble to publish via hidden descriptors you know not to include your name/SSN/gps/cell-number in your apache headers;) This is completely tangential, but can you point me to the Tor investigations? The interaction of tor/law-enforcement is something I am extremely interested in.
- deleted 14y ago[deleted]
- deno 14y ago> In order to get access to your server they need to circumvent the anonymity that tor provides. Not necessarily, the CP sites were hacked using PHP vulnerabilities or something similar, not to mention your hosting provider could just get interested in your network activity for whatever reason. > This is completely tangential, but can you point me to the Tor investigations? Nothing I have bookmarked, sorry.
- dfc 14y agoThanks for checking. Sadly the bookmarks always go missing...
- far-I 14y agowhat about Anomos? Is that safe enough?
- Karunamon 14y agoAnother thing is that you shouldn't really do BT over Tor. The network is not set up for it and you consume a great deal of resources.