Re: Best Hidden Service web server?
On Sun, Jan 9, 2011 at 7:37 AM, wrote: > Original Message > From: Orionjur Tor-admin > >> Is it a bad idea to use an apache for a hidden serice? > > Not at all. I'm actually recommending it over any other because it's complex > and has a lot of traps for you to fall into. That sounds ridiculous right? > No it isn't, because that will force you to learn it and secure it, instead > of just relying on a simple and easy to use webserver without having any > intention of learning anything about security. Security should be your main > concern and main focus as a hidden service operator, not taking the easy > route and then lay back and think that your safe just because you installed > a simple and lightweight webserver. So you are actually recommending a piece of software with thousands of options with no real idea what the default will allow, 90% of which the average home-hoster will not need and will thus not test. And this over, say, some minimalistic 1000 LOC static-page server? And this for security? *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Best Hidden Service web server?
hi...@safe-mail.net wrote: > Original Message > From: Orionjur Tor-admin > >> Is it a bad idea to use an apache for a hidden serice? > > Not at all. I'm actually recommending it over any other because it's complex > and has a lot of traps for you to fall into. That sounds ridiculous right? > No it isn't, because that will force you to learn it and secure it, instead > of just relying on a simple and easy to use webserver without having any > intention of learning anything about security. Security should be your main > concern and main focus as a hidden service operator, not taking the easy > route and then lay back and think that your safe just because you installed > a simple and lightweight webserver. > *** > To unsubscribe, send an e-mail to majord...@torproject.org with > unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ > hahaha... that's what they (apache docs team) replied when i told them their documentation is shit and was comparing it to php docs which are intuitive and awesome... asked them to add a example .htaccess for every damn variable/command they have with a red frame around it... they said their docs are so shitty to discourage noobs who would taint apaches reputation... xD *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Best Hidden Service web server?
Original Message From: Orionjur Tor-admin > Is it a bad idea to use an apache for a hidden serice? Not at all. I'm actually recommending it over any other because it's complex and has a lot of traps for you to fall into. That sounds ridiculous right? No it isn't, because that will force you to learn it and secure it, instead of just relying on a simple and easy to use webserver without having any intention of learning anything about security. Security should be your main concern and main focus as a hidden service operator, not taking the easy route and then lay back and think that your safe just because you installed a simple and lightweight webserver. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Best Hidden Service web server?
Orionjur Tor-admin wrote: > Dirk wrote: >> Jerzy Łogiewa wrote: >>> What is the best web server for hidden service? Are any containing exploits >>> that can reveal IPs, or maybe even in the 404 pages etc? >>> >>> -- >>> Jerzy Łogiewa -- jerz...@interia.eu >>> >> >> http://www.acme.com/software/thttpd/ >> http://www.acme.com/software/mini_httpd/ >> http://www.acme.com/software/micro_httpd/ (~200 lines of code) >> *** >> To unsubscribe, send an e-mail to majord...@torproject.org with >> unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ >> > > > Is it a bad idea to use an apache for a hidden serice? > > *** > To unsubscribe, send an e-mail to majord...@torproject.org with > unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ > i don't know... apache is quite bloated.. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Best Hidden Service web server?
Dirk wrote: > Jerzy Łogiewa wrote: >> What is the best web server for hidden service? Are any containing exploits >> that can reveal IPs, or maybe even in the 404 pages etc? >> >> -- >> Jerzy Łogiewa -- jerz...@interia.eu >> > > http://www.acme.com/software/thttpd/ > http://www.acme.com/software/mini_httpd/ > http://www.acme.com/software/micro_httpd/ (~200 lines of code) > *** > To unsubscribe, send an e-mail to majord...@torproject.org with > unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ > Is it a bad idea to use an apache for a hidden serice? *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Best Hidden Service web server?
Jerzy Łogiewa wrote: > What is the best web server for hidden service? Are any containing exploits > that can reveal IPs, or maybe even in the 404 pages etc? > > -- > Jerzy Łogiewa -- jerz...@interia.eu > http://www.acme.com/software/thttpd/ http://www.acme.com/software/mini_httpd/ http://www.acme.com/software/micro_httpd/ (~200 lines of code) *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Best Hidden Service web server?
What is the best web server for hidden service? Are any containing exploits that can reveal IPs, or maybe even in the 404 pages etc? -- Jerzy Łogiewa -- jerz...@interia.eu -- Pobierz i zagraj - gry czekaja na Ciebie! Sprawdz >> http://linkint.pl/f28dd *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
