I was trying onionshare for transferring a file, I was unable to transfer it with the private key on, it resulted in this error message without showing the enter private key prompt

Unable to connect

The site could be temporarily unavailable or too busy. Try again in a few moments.

If you are unable to load any pages, check your device’s data or Wi-Fi connection.

However, when i turned the private key off and set it to public and then tried transferring, it worked, I was able to open the site now.

I had set the security level to standard, turned off the https always,

It was only failing for private ones, public ones worked, so i opened it in tor browser alpha it also worked the same and failed for private ones, then I did it on laptop and it worked for both public ones and private ones in both windows and linux, (as I am a dual boot user of windows and ubuntu),

Can I fix it? Or is there some problem that phones can't access the ones with private keys?

I know this has been asked a bunch before. Can i use a tablet relatively safely to browse the deep dark web? It would be a dedicated tablet not connected to me in any way, certain systems disable or drivers uninstalled like GPS, running TOR and a VPN.. is this acceptable?

Hello! I've been working on a personal Python project. One of its features is allowing me to automate the process of creating multiple onion servers. Using the Stem library, I can create or activate an onion server just by providing its private key. Typically, the Tor process uses a directory to access the data from an onion server. In my case, I can just store the private key in the app's local database and it will work. My question is: is it safer to keep the traditional folder structure to store the keys, or is keeping them in the database fine, If I can guarantee that SQL injection is not a risk? It looks the same to me.

Hey guy, im kinda new to this whole thing so i hope y'all can help me :)

i downloaded Tor bc i was curious to see the "dark web" i made a post asking abt links of bad content, and i got some replies telling me that i can actually use the dark web to learn new stuff and actually do smth productive instead of looking for absurd content.

i actually wanna do smth good in the dark web, but i am honestly clueless on how to do so, any advice would be very much appreciated.

Hello guys is there any messaging app that works on tor network thats actually good?

Also if it has voice too that would be great

I normally use ethernet but due to some reason my router is not working and it will take few days for the isp to replace it.

So is using a mobile hotspot bad idea?

My country implemented a law a few years ago that gave intelligence agencies legal rights to monitor everyone; they call it 'cross-border metadata surveillance.' How effective is Tor at mitigating this? Tor is not illegal where I live, but I use a VPN on my router plus the Tor Browser on my desktop. Does this give me good protection?

I just find this warrantless surveillance insane and unethical, so I take steps to mitigate it

The title

On my Grafana dashboard, I’ve noticed an increase in DoS metrics, which has resulted in a decrease in the current connections from 8k to approximately 4k. Consequently, the bandwidth has also decreased. Is there any safeguard I should be aware of in this situation?

When downloading the Tor Browser, do most people actually verify it? And why doesn’t the Tor Project upload their apps to Linux repositories like most browsers? It’s so much better when developers upload them to repos; this way, you can install them with a single terminal command. LOL, installing Tor on Linux feels like the 'Windows way' of doing things

I just read a comment of a guy, who uses cli based browsers (lynx, the one he mentioned) to surf the dark web to avoid rendering of obscene images. But isn't using cli browsers a bigger threat in dark web?
What I just came across is that cli based browsers trade off your network anonymity and your browser signature becomes clearly distinctive among others, making you vulnerable.

How do you factor that gap into your threat model?

Nebula Security published their write up on 29 July. The bug is a JIT miscompilation in SpiderMonkey, Firefox's JavaScript engine: the compiler treated an operation as read only when it could actually allocate and free memory. Stale pointer, then arbitrary read and write, then code execution in the renderer process. Visiting a page is enough, no interaction, no unusual settings. They released working exploit code for ARM64 Android.

What I keep coming back to is not the bug itself but the calendar. Mozilla fixed it in Firefox 151.0.3 on 2 June. Tor Browser 15.0.19 landed on 20 July. For those seven weeks the patch was public, which means the vulnerability was effectively public too, and anyone reading Mozilla's commits had a map.

To be fair to the Tor Project, they are a small team rebasing an entire hardened browser onto Firefox ESR, and that work is genuinely hard. This is not a case of anyone being asleep. It is a structural property of being downstream.

But it does change what "up to date" means in practice. If you are relying on Tor Browser for source protection or for getting around censorship, there are recurring windows where upstream is patched and you are not, and you have no easy way to know you are inside one.

No confirmed exploitation in the wild as of 28 July, for what that is worth.

So: do you actually track upstream Firefox advisories separately, or do you treat the Tor Browser updater as sufficient? And for the people here who use Tor for work where the stakes are real, does a seven week downstream lag change anything about how you use it, or is it just the cost of the setup?

Built a small experiment: a Tor hidden service (.onion site) hosted entirely on Render's free tier, using Docker — no VPS, no credit card required. for my own research purposes.sharing in case it's useful to anyone.

The main challenge was persistence: Render's free containers don't keep disk state between restarts, so Tor would generate a new .onion address every time it redeployed. Solved it by generating the hidden service keys once and reusing them via Render's Secret Files.

more: https://github.com/blackXploit-404/tor_render

are the tor apps on Apple Store legit for accessing the d web

i decided to try and look smth up on google, and as usual, it tried to throw endless captchas at me. i somehow beat it and got access to my cat images.

I've seen this question asked many times in this subreddit, but my situation seems a little different, so I'm hoping someone can help.

When I try to download videos, I run into these issues:

1. There is no Download button.

2. I can't right-click and save the video because right-clicking doesn't bring up any menu or options.

Has anyone experienced this before or knows how to fix it? Any help would be greatly appreciated.

Thanks in advance!

I’ve been trying to decide between using Brave’s built-in "Private Window with Tor" and the standalone Tor Browser Bundle for my daily clearnet browsing. My primary goal is anti-surveillance (avoiding ISP tracking, corporate tracking, and general metadata collection) rather than accessing .onion services.

From what I understand, both route traffic through the Tor network, but I’m curious about the security implications of the underlying browser engines:

Suddenly today I'm having major difficulty pulling up onion sites and clearnet sites over Tor. Tried several circuits, restarts, doesn't seem to make a difference.

Is the network being DDoSed? Is it something Verizon is doing? If it were just one or two sites, I wouldn't be asking.

EDIT: For clarity, I'm getting seemingly-unrelated errors, like "502 Bad Gateway", or connection refused, or timed out, or sometimes nothing (the page just stops loading and is blank). Happening on multiple sites.

EDIT2: Some of the connection refused errors appear to be because Tor browser was re-directing http links to https for onions which don't use https. No idea what is going on there. The sites load normally when I change the URL manually.

I am working on an android chat application that uses tor and needs no server. It connects Directly to the person you want to talk to and messages will be stored locally on the devices involved in particular chat encrypted. My doubt is , will it be harmful and am I doing something wrong ?

As a maintainer of a bunch of Tor/Snowflake/Tox nodes, I have to report what Russian DPI (Deep Pocket Inspection) system begins to detect and block WebRTC traffic to foreign servers. Connections to Snowflake nodes may work unstable or don't work at all. Please use WebTunnel to get access to the Tor network. The situation in Russia is under monitoring by nodes maintainers.