Documentation
- Details
-
Category: Linux
-
Published: Monday, 20 July 2015 03:46
-
Written by Ben Tasker
On a system with SELinux, upon attempting to start Tor, you may see errors similar to the following
[root@localhost tor]# service tor start
Raising maximum number of filedescriptors (ulimit -n) to 16384.
Starting tor: Apr 02 15:53:14.041 [notice] Tor v0.2.5.11 (git-83abe94c0ad5e92b) running on Linux with Libevent 1.4.13-stable, OpenSSL 1.0.1e-fips and Zlib 1.2.3.
Apr 02 15:53:14.042 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
Apr 02 15:53:14.042 [notice] Read configuration file "/etc/tor/tor-rpm-defaults-torrc".
Apr 02 15:53:14.042 [notice] Read configuration file "/etc/tor/torrc".
Apr 02 15:53:14.056 [notice] Opening Socks listener on 127.0.0.1:8080
Apr 02 15:53:14.057 [warn] Could not bind to 127.0.0.1:8080: Permission denied
Apr 02 15:53:14.058 [notice] Opening DNS listener on 127.0.0.1:54
Apr 02 15:53:14.060 [warn] Could not bind to 127.0.0.1:54: Permission denied
Apr 02 15:53:14.060 [notice] Opening Transparent pf/netfilter listener on 127.0.0.1:9040
Apr 02 15:53:14.062 [warn] Could not bind to 127.0.0.1:9040: Permission denied
Apr 02 15:53:14.062 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.
Apr 02 15:53:14.062 [err] Reading config failed--see warnings above.
/usr/bin/torctl start: tor could not be started
Which is almost certainly the result of a selinux policy
Read more ...
- Details
-
Category: Linux
-
Published: Monday, 20 July 2015 02:32
-
Written by Ben Tasker
This is Part 3 of my Hidden Service From Scratch documentation. In Part One we designed and built our system, in Part Two we configured HTTP Hidden Service hosting.
In this documentation, we'll be looking more generally at user account and identity protection, as well as examining why you may need to maintain a certain level of paranoia even if your hidden service doesn't fall outside the law in your home country.
Read more ...
- Details
-
Category: Linux
-
Published: Monday, 20 July 2015 01:38
-
Written by Ben Tasker
Despite some fairly negative media attention, not every Tor Hidden Service is (or needs to be) a hotbed of immorality. Some exist in order to allow those in restrictive countries to access things we might take for granted (like Christian materials).
Whilst I can't condone immoral activities, Tor is a tool, and any tool can be used or misused
This is part one in a detailed walk through of the considerations and design steps that may need to be made when setting up a new Tor Hidden Service.
The steps provided are intended to take security/privacy seriously, but won't defend against a wealthy state-backed attacker.
How much of it you'll need to implement will obviously depend on your own circumstances, and in some cases there may be additional steps you need to take
Read more ...
- Details
-
Category: Linux
-
Published: Monday, 20 July 2015 02:26
-
Written by Ben Tasker
Despite some fairly negative media attention, not every Tor Hidden Service is (or needs to be) a hotbed of immorality. Some exist in order to allow those in restrictive countries to access things we might take for granted (like Christian materials).
Whilst I can't condone immoral activities, Tor is a tool, and any tool can be used or misused
This is part Two in a detailed walk through of the considerations and design steps that may need to be made when setting up a new Tor Hidden Service.
The steps provided are intended to take security/privacy seriously, but won't defend against a wealthy state-backed attacker.
In Part One we looked at the system design decisions that should be made, and configured a vanilla install ready for hosting hidden services.
Read more ...
- Details
-
Category: Joomla
-
Published: Saturday, 23 May 2015 01:44
-
Written by Ben Tasker
I did some work recently on making BenTasker.co.uk available via both a Tor Hidden Service (otherwise known as a .onion) and via the WWW.
The reasons for doing this are published elsewhere, but this documentation summarises the steps I had to take (and why) in order to have the site safely accessible via both routes of access.
For those who are interested, there's a far higher level of detail over on Projects.bentasker.co.uk.
Read more ...
