A step-by-step guide to hosting a personal website as a Tor hidden service, explaining why Tor gives anonymity and how to configure a self-hosted site to live on a .onion address. It highlights that hidden services remove the need for certificate authorities and DNS and hide the server IP by deriving the address from a key and relying on Tor’s encrypted relay network. The write-up encourages supporting the Tor Project and notes the privacy benefits of volunteer relays while stressing operational details that preserve security and anonymity.
Practically, set up Tor to point a hidden service directory at a local web port, ensure that directory is dedicated and owned by Tor with strict permissions, restart Tor and read the generated .onion hostname. Configure the web server to listen on localhost (the forwarded port) without TLS because Tor handles encryption. For static sites, build a second copy with the onion base URL so links resolve correctly when served over Tor; the author uses Hugo to build both clearnet and Tor targets automatically and rsyncs each build to separate web roots. The post includes the exact config and an example .onion address to connect with Tor Browser.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A U.S. immigration advocate sued the government after a border agent searched his phone without a warrant and copied data. He believes the government targeted him due to his activism and political work on immigration rights. (arstechnica.com)
Over 44,000 legal objections have been filed against Palantir's NHS data platform, demanding it be blocked from handling medical data. The campaign follows backlash over the company's involvement with the Israeli military and US immigration enforcement. (theguardian.com)
OpenAI claims that a Chinese AI model stole its intellectual property. The company alleges that it had previously appropriated IP from other sources. (theregister.com)
Android developers face new requirements to publish apps, including a $25 verification fee and identity verification, even for small-scale projects. These policies have caused frustration among developers who want to share their apps freely without extensive registration processes. (twitter.com)
Christa Pike, the only woman on Tennessee's death row, was reportedly still alive after receiving two lethal injections. Her lawyers are seeking to halt her execution, citing that she remained conscious and had a heartbeat despite the injections. (nbcnews.com)
Sandboxing alone may not be enough to contain rogue agents, as advanced attackers can find ways to bypass these security measures. Additional cryptographic and security strategies are necessary to effectively limit malicious activities. (blog.cryptographyengineering.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.