Silk Road forums
Market => Product offers => Topic started by: uihost on April 15, 2012, 02:12 pm
-
Hello,
I'm already known under a different name here, but since I'd like to keep buying and potential vending activities separate, I've created a new account.
What I'd like to know if there's any interest in paid .onion webhosting. In real life I'm a professional nerd with extensive experience in webhosting / system administration and I have access to high quality equipment (friends in data centers, access to cheap servers). Because of this, you'll be getting:
- Proper webhosting, hosted in top notch datacenter. The performance of your site will mostly be impacted by the Tor connection, not the performance of the server or data connection.
- Security, security, security. I'll be doing as much as possible to keep us both safe.
- PHP, MySQL, etc. What exactly will be available depends on what you want and whatever is possible without compromising both our anonymity.
- Support on getting your site running and help on fixing any technical issues (script errors, performance, etc). However, I will not be offering programming or webdesign services!
- Custom .onion URL (you can choose the first 7 characters or less - more characters is possible, but can take days to generate).
- Very lenient policy on what you can host ;).
For this I'm thinking of a price somewhere between $5 to $10 a month.
Please let me know if there's any interest in this and if you have specific feature requests regarding this service.
-
this is a needed service but holds tremendous responsibility.
how will you assure clients of your trustworthiness?
what differentiates you from other options?
thank you
-
+1 but would like the same answers as person above
-
I'd be very interested in this service, though I would want to see some type of sample of your work.
-
@muskabuzz and @Xander7: each user will be jailed (linux-vserver), which removes the 'shared' part which most webhosters have. You'll be on a shared server, but every user is rooted in his or her own little VPS. This way, there's no way you can access files or databases from another user.
Moreover, you will never connect to something else but a hidden service. Since you'll be routed through tor, I will never have a clue who you are. It's up to you to ensure you encrypt anything that gets stored on the server, which shouldn't be seen by me or a possible attacker. Make sure that the decryption key is not on the server ;). I won't actively go through your files, of course, but I'd suggest you prepare for the worst: in case of an exploit in your site, you don't want your sensitive information to be available.
I can't explain you the full implementation of security features, since that would make it an easier target for any attacker (knowing what to aim for, etc), but this alone already provides a lot of security.
I can't imagine a way to prove my trustworthiness, though. Although I can tell you the security implementation (and you can see some of it as a customer), but at some point you'll probably have to take my word for it. If you can think of a way, without giving my anonymity away, please tell me.
What differentiates me from others (I haven't found many, though), is the fact that I consider myself an expert. As muskabuzz put correctly, this would be an enormous responsibility. Not only do I have this responsibility to you as a customer, but also to myself. Knowingly hosting the more obscure parts of the internet won't be taken lightly by any judge ;). I believe I have enough know-how to pull this of safely, for both customer and me. Next to that, you'll have access to that knowledge. All the time from a security stand point.
@Delta11: all of my 'work' (system administration, etc) has been done on legit and clearnet sites/servers. I can't tell you about that, without giving my anonymity away. I currently got a rather boring hidden service running for this, http://uihost6g5hkrmjjq.onion. If you have something you'd like to see, which I can show without giving up my anonymity, please let me know! Please remember: I do not do any scripting or designing, it's up to you how you arrange that.
-
I would be interested! 8)
-
This is very good to see. As it happens I already arranged for VPS/Tor-hidden service for my own vending .onion but it is good to see other people coming online to fill this vital need for new and old vendors. That way if S.R. ever goes down.. all we are missing is the trusted escrow agent and the common joint market. People can use http://xycpusearchon2mc.onion/ to look up a trusted vendor's .onion backup and if they have that vendors old GPG pubkey from Silk Road they can verify it is their old connect.
+5!!!!
-
Definitely interested
-
any updates to this? are you interested in moving forward?