[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] Securing a hidden service

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-talk] Securing a hidden service
From: Aaron Brouard <ambrouard@xxxxxxxxx>
Date: Fri, 7 Dec 2012 21:50:32 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Fri, 07 Dec 2012 16:50:43 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=7yZ4ODaeCucdF73zQeZeDsaYanYZWh0rX6XCxwLl5ic=; b=DONVryrma6BeCWtU/+SdBqGG9aSiLEga0oJi6bmDVY25775m7n1CrCFs3mK8c6TolH 8q8jlzqZA6uxBvCVPAmzciHbTKAOQxMPTQq/0J72ZYMR7qIpBAlVDQl2nvBb2kQ6hXr8 pef4Zn6M/edYXv5N1lPUhLQVI/Hphm+49TrdToPaPpZ3mVroB/cYPLM3bzsIKCFX/Bd0 LtSg9Kz/B/aLG4SapXLwljWyEco570+fPHozlx5pGxE0y4kau/pGV8R9lV0FUzCbylvc OpXsNkNvUnwmmyrr7aoqsrh39M/ILYmwXNn8WnhBFsFgVeQSCmCqWJ4SzTHWRIQbhpRd A/uA==
List-archive: <http://lists.torproject.org/pipermail/tor-talk>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx

I'm trying to make my hidden service more secure. It runs on a server
running Ubuntu 12.04.1 LTS server version. I have set up full disk
encryption and a basic firewall but I want to do more. If an attacker
managed to compromise nginx or apache (whichever I decide to use), is there
a way I can prevent the web server from sending any data outside of the Tor
network? An apparmor profile or something?

-Aaron

Key ID 690BBEA3
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Securing a hidden service
  - From: adrelanos
- Re: [tor-talk] Securing a hidden service
  - From: Eugen Leitl

Prev by Author: Re: [tor-talk] general request: Port blocking and developers?
Next by Author: Re: [tor-talk] tor-talk Digest, Vol 23, Issue 25
Previous by thread: Re: [tor-talk] about tor entry node
Next by thread: Re: [tor-talk] Securing a hidden service
Index(es):
- Author
- Thread