Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-16 Thread Jude Young
On 03/16/2012 04:47 AM, bigtor wrote: On 03/15/2012 01:37 AM, Jude Young wrote: What he said. PHP is a huge risk. I've worked with it before, even just trying to force SSL its a hassle. If using Apache, try using SSLRequireSSL, see http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslrequir

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-16 Thread bigtor
On 03/15/2012 01:37 AM, Jude Young wrote: What he said. PHP is a huge risk. I've worked with it before, even just trying to force SSL its a hassle. If using Apache, try using SSLRequireSSL, see http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslrequiressl In PHP, SERVER_PORT can be hand

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-15 Thread Martin Hubbard
On 03/15/12 02:34 AM, Fabio Pietrosanti (naif) wrote: > On 3/14/12 2:05 PM, jason cooper wrote: > > Hi, > > I have recently been playing with hidden services and as we all know > > the software and how it is configured can be a key difference between a > > hidden service staying hidden and a hidde

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-15 Thread Jude Young
On 03/15/2012 06:06 AM, and...@torproject.is wrote: On Thu, Mar 15, 2012 at 10:00:04AM +, jason.coo...@heckrothindustries.co.uk wrote 1.0K bytes in 30 lines about: : So far the key issues standing out about forum software best suited : for running a forum as a hidden service is : : * it ne

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-15 Thread Eugen Leitl
On Thu, Mar 15, 2012 at 07:06:55AM -0400, and...@torproject.is wrote: > On Thu, Mar 15, 2012 at 10:00:04AM +, > jason.coo...@heckrothindustries.co.uk wrote 1.0K bytes in 30 lines about: > : So far the key issues standing out about forum software best suited > : for running a forum as a hidden

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-15 Thread andrew
On Thu, Mar 15, 2012 at 10:00:04AM +, jason.coo...@heckrothindustries.co.uk wrote 1.0K bytes in 30 lines about: : So far the key issues standing out about forum software best suited : for running a forum as a hidden service is : : * it needs to be easy to security audit : * low bandwidth

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-15 Thread jason cooper
Quoting "Fabio Pietrosanti (naif)" : As you know performance is also a key issue of Tor Hidden Services. So from the performance point of view i suggest to evaluate a Forum Software that make as less HTTP requests as possible and provide efficient caching in session-data of relevant information

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-15 Thread Fabio Pietrosanti (naif)
On 3/14/12 2:05 PM, jason cooper wrote: > Hi, > I have recently been playing with hidden services and as we all know > the software and how it is configured can be a key difference between a > hidden service staying hidden and a hidden service being discovered. As you know performance is also a

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-14 Thread Jude Young
On 03/14/2012 03:05 PM, Commence Without Illusions wrote: Your best option is to run your forum software, server, and everything else except Tor in a virtual machine and then direct all that machine's traffic through Tor. Anything with scripting, PHP, or even web forms is going to be a significan

Re: [tor-talk] Question regarding forum software for use as a hidden service

2012-03-14 Thread Commence Without Illusions
Your best option is to run your forum software, server, and everything else except Tor in a virtual machine and then direct all that machine's traffic through Tor. Anything with scripting, PHP, or even web forms is going to be a significant risk. Even without it, you're assuming the web server will

[tor-talk] Question regarding forum software for use as a hidden service

2012-03-14 Thread jason cooper
Hi, I have recently been playing with hidden services and as we all know the software and how it is configured can be a key difference between a hidden service staying hidden and a hidden service being discovered. Assuming a common type of site that would want to run as a hidden serv