root@bigbadman:~# cat tor.html
tor network

> What Is Tor?

Tor β€” originally The Onion Router β€” is a free software project that enables anonymous communication. Unlike regular internet traffic which goes straight from your computer to the destination server, Tor routes your connection through multiple volunteer-run servers, called nodes or relays. Each hop encrypts the traffic again, creating layers of encryption like the layers of an onion.

The result: nobody along the path knows both who you are and where you're going. The first node (entry guard) knows your IP but not your destination. The middle nodes know neither. The final node (exit relay) knows your destination but not your source.

This design makes it incredibly difficult for anyone β€” ISPs, governments, surveillance agencies β€” to correlate your online activity with your physical location.


πŸ•ΈοΈ> How Onion Routing Works

Let's trace what happens when you access a website through Tor:

1. Building the Circuit
Your Tor client selects 3 random relays from over 6,000 public nodes:
- Entry Guard β†’ Middle β†’ Exit Relay

2. Layered Encryption
Your data is wrapped in three layers of encryption:
DATA = Encrypt(Exit-Key, Encrypt(Middle-Key, Encrypt(Entry-Key, YourData)))

3. Through the Circuit
- Entry decrypts outer layer β†’ sees Middle, forwards
- Middle decrypts next layer β†’ sees Exit, forwards
- Exit decrypts final layer β†’ sees YourData, sends to destination

4. No Single Point Knows Everything
Entry knows YOUR IP but not YOUR DATA.
Exit knows YOUR DATA but not YOUR IP.
Middle knows neither.

If one node is compromised, it cannot de-anonymize you alone. Only if all three nodes are controlled by the same adversary simultaneously can someone potentially correlate timing and break anonymity. This is statistically unlikely β€” but not impossible.


🎭> Hidden Services (.onion)

This is where things get interesting. Just as you can browse anonymously with Tor, you can also host services anonymously β€” this is called a Hidden Service.

A Hidden Service never reveals its real IP address. Instead:

  1. The server creates a public/private key pair. The public key becomes your .onion address (like 3syxsh7q3h4lhardkw7u4tvezf7exyalf3dh32cox6b6hkoigo2aikid.onion)
  2. The server connects to the Tor network and announces introduction points
  3. When a client wants to connect, they pick a random circuit point called the rendezvous point
  4. Client and server meet at the rendezvous point β€” neither knowing the other's real IP

This is why this site runs on both clearnet and .onion. Same content, two different access methods. For visitors in restrictive environments, .onion bypasses censorship. For everyone else, it's another option.

// INFO: Tor Hidden Services don't need port forwarding or public IPs. Everything happens inside the Tor network. No firewall holes, no exposed ports, no DNS records.


> Access This Site Via Tor

This website is also available as a Tor Hidden Service. If you want to access it anonymously, or if you're in a region where the clearnet domain is blocked, use the address below in your Tor Browser:

// ONION ADDRESS
// requires Tor Browser or Tor-capable client // do not paste this address into a regular browser

Don't have Tor Browser? Download it from the official Tor Project: torproject.org/download

// SECURITY WARNING: Only use the official Tor Browser. Third-party "Tor browsers" from app stores or random websites may contain malware or tracking. Verify the signature. Trust nothing else.


⚑> Speed vs Anonymity Tradeoff

Tor isn't fast. Three hops, multiple encryptions, volunteer bandwidth constraints β€” it's inherently slower than direct connections. But speed isn't the priority here. Anonymity is.

Common misconceptions:

  • "Tor is only for illegal activities" β€” Wrong. Journalists use it to communicate with sources. Activists in authoritarian regimes use it to avoid persecution. Whistleblowers use it to leak safely. Normal privacy-conscious people use it to prevent ISP tracking.
  • "Tor is completely unhackable" β€” Wrong. End-to-end correlation attacks exist. Exit relay sniffing exists. Browser fingerprinting exists. Tor provides protection against many adversaries, not all threats.
  • "Using Tor makes you suspicious" β€” Increasingly false. Millions use Tor legitimately. In places like Iran or China, using Tor is normal. In Western democracies, the stigma is fading.

// SECURITY WARNING: The biggest vulnerability isn't Tor itself β€” it's user behavior. Downloading files, enabling JavaScript, logging into accounts that identify you β€” these actions deanonymize you regardless of Tor's strength. Use the Tor Browser. Don't mix identities.


> Who Uses Tor?

User Group Purpose
Journalists Secure communication with sources
Whistleblowers Anonymous leaks (SecureDrop uses Tor)
Activists Organizing under censorship
Privacy Advocates Preventing ISP/government surveillance
Security Researchers Threat intelligence, safe browsing
Ordinary Citizens Avoiding corporate tracking

The Tor Project is funded by NGOs, government grants (including DARPA historically), and donations. The irony is intentional: sometimes freedom needs funding from systems it critiques.

// the net interprets censorship as damage and routes around it // - john perry barlow