/tech/ - Technology★

>>939490 (OP)

I forgot to say that the service will be a blog, like Wordpress (But not wordpress ;))

>My weak-willed brain is infected with memetic cancer after contracting it from another larping teenager.

>>939490 (OP)

See https://riseup.net/en/security/network-security/tor/onionservices-best-practices. https://www.torproject.org/docs/tor-onion-service refers to it too. Pay extra attention to the section about localhost bypasses. Separate physical machines are best, with a firewall blocking all traffic out of the server hosting your blog. A similar virtual setup can also work.

>>939507

Here's some more keywords for you and your shill friends to jump on: FBI CIA NSA IRS ATF BATF DOD WACO RUBY RIDGE OKC OKLAHOMA CITY MILITIA GUN HANDGUN MILGOV ASSAULT RIFLE TERRORISM BOMB DRUG HORIUCHI KORESH DAVIDIAN KAHL POSSE COMITATUS RANDY WEAVER VICKIE WEAVER SPECIAL FORCES LINDA THOMPSON SPECIAL OPERATIONS GROUP SOG SOF DELTA FORCE CONSTITUTION BILL OF RIGHTS WHITEWATER POM PARK ON METER ARKANSIDE IRAN CONTRAS OLIVER NORTH VINCE FOSTER PROMIS MOSSAD NASA MI5 ONI CID AK47 M16 C4 MALCOLM X REVOLUTION CHEROKEE HILLARY BILL CLINTON GORE GEORGE BUSH WACKENHUT TERRORIST TASK FORCE 160 SPECIAL OPS 12TH GROUP 5TH GROUP SF

>>939490 (OP)

Look at how Tails does shit.

Create a server that can only connect to the internet via tor, set up some iptables rules to ensure you don't run into issues, create the site with a HSV3 address since those have a ton of benefits as compared to the old addressing scheme. Depending on what you're hosting you may want to disable the extra couple hops on the server side to reduce latency but that'll make your server easy to find.

Onion services are great for private ssh over the internet, or hosting your own sort of wiki. I haven't tried configuring a VPN onion, not sure if there's any real benefit considering the crazy latency you'd experience and the fact that it's a non-standard setup.

As for, >>939602 i'm guessing they're suggesting to look at how tails handles it's connection to the network rather than how it handles hosting since tails hasn't released an OS for hosting yet (but it is planned)

>>940139

>how tails handles it's connection to the network

Yeah I should have been more descriptive. Tails uses iptables and some other magic to completely block non-tor connections

OpenBSD using default httpd, of blocking all outbound connections, inbound only on ports 9050 and maybe 22 if you want to disable physical access, hardware RAID with disks encrypted with bioctl. OpenBSD is great, disable all logs too.

>>940463

>of

I meant pf. It's really simple, really powerful firewall software.

>>940446

Except through the unstable browser which has been used to leak actual IP in the past, disable if you don't need it.

>dank web

>not cp

Talk about missing the point