OnionShare Lets You Chat, Host Websites, and Share Files Over TOR

[@ish5100]

"As long as everyone behaves in there" *- Famous last words*

[@christopherstein2024]

Yeah. Like that's even going to happen.

[@nilemagenta1787]

8chan lets gooo

[@scalawagmax]

Hasn't even been an hour and the chat's already been thoroughly destroyed, ripperoni in pepperoni mental chat

[@NicholasHenkey]

Sweet application for people to share schematics for 3d printed fireaxes!

[@warhawk_yt]

@Mialisus I couldn’t stop laughing reading that lol

[@CircaSriYak]

Don’t forget the wall hangers

[@Bangy]

What about indexxes of links on certain topics?

[@stumbling]

icelegs?

[@imacup.2667]

@Mialisus foock, i didnt actually laugh for like 3 months, and now i'm here laughing the shit out of me at 12 am, thanks

[@nathanb011]

The large file size things sounds like the file is being stored in memory and not being removed. That could be fixed fairly easily IF that is the case.

[@Reth_Hard]

I removed my memory sticks one by one but it's still happening and if I remove all of them the computer doesn't restart! Is this normal?

[@Trident_Euclid]

@@Reth_Hard Does it make smoke? If so you are gtg.

[@Reth_Hard]

@@Trident_Euclid Are you sure? I don't want to break my computer but I guess I can try overclocking the memory just a bit... Is it safe to go from 1600mhz to 2133mhz?

[@Trident_Euclid]

@@Reth_Hard Imma tell you a secret. The MIT CIA GiD Don't want anyone to know. You can run faster speeds just by inserting ram into AGP slot and spray some WD-40 all over it.

[@Reth_Hard]

@@Trident_Euclid Damn bro! You must have been deep on that deep web! That's the kind of technology that probably been stolen from the reptilian... I'm sorry man, that shit is too hot, even for me! OMG... I don't want anything to do with this! I don't know this person! I swear! I'm innocent!!! Ahhhhhh!!

[@user-lt2rw5nr9s]

1:45 Even OnionShare can't escape from the corpo art style.

[@tiagomiranda316]

It's a virus at this point really

[@estebanospina50]

even if its open source seems driven by the feds

[@Noruzenchi86]

@@estebanospina50 soft reminder that TOR itself was developed under the US navy much like the ancient intranet was en.wikipedia.org/wiki/Tor_(network)#History

[@fossforever512]

@@Noruzenchi86 even so the math is good, better using it then normal web browsers in any case

[@MrAnsatsuken]

the Globohomo artstyle.

[@MentalOutlaw]

last one in the OnionShare chat is a rotten egg

[@hylianchampion7713]

:(

[@N.S.A.]

has left the chat.

[@batorerdyniev9805]

3

[@BigYoshi826]

Wouldn't you have to have it up and actually put the link somewhere

[@zyansheep]

Needs a spam filter, max message size, and slow mode...

[@xxX_420BlazeIt_Xxx]

I'm gonna share blueprints for various devices to create and refine weapons grade plutonium. Sweet! Hold, on. Someone is knocking at my door...

[@TheHylianJuggalo]

When radioactive folks are salty, I'm happy. :)

[@N.S.A.]

😢

[@fluffyjello]

*radioactive soyjaks with dog ears

[@glowingone1774]

:(

[@glowinthedark9082]

lmao

[@RealMephres]

based

[@blakeeastman4769]

Onion addresses are randomly generated keypairs. Nobody administers them, they are not recycled, you do own your urls. You will never pay money for an onion url, though you can spend computing time brute forcing a vanity one

[@TheJackiMonster]

Exactly. More important aspect of using onion addresses to host own services is that your system needs to keep running to host them. Sadly even static web pages won't be stored in a DHT or similar to keep them alive while you're offline. OnionShare is just making it easier to use hidden services.

[@marcello4258]

why should the address be a keypair? the address is just the address

[@IngwiePhoenix]

Huh, that explains why they all look kinda funky, minus the few that don't. Do people use CNAMEs though? or some "tor TLD" that redirects to the current address?

[@blakeeastman4769]

@@IngwiePhoenix Great question! The actually brute force them, which means they just guess a bunch of different keypairs until they find one that says what they want. If memory serves, the tool to do this is called "shallot"

[@blakeeastman4769]

@@marcello4258 The address itself is a part of the public key. Permission to use that address is determined by possession of the private key. It's just like a bitcoin address.

[@notsam9528]

This is actually really useful for web dev practice

[@user-uo8ny1kj4c]

and piracy

[@alex15095]

@@user-uo8ny1kj4c Why should anyone use this for piracy over traditional torrents or IPFS? This is probably quite slower too

[@RadikAlice]

@@alex15095 Ease of use, and according to another commenter here. Ain't that slow

[@alex15095]

@@RadikAlice This works over the Tor network which is a massive layer of indirection in the middle. Torrents, on the other hand, download and upload data directly with peers. I'd expect the latter to be way faster than the former

[@k5tggiv6ubmmb3as9]

By the way OnionShare also has a persistent mode so you can use the same .onion address after restarting your computer for example. I don't know how to do it from the GUI app but the command line version has a --persistent argument

[@Daniel-hz6pt]

OnionShare is awesome, quick note, what you say at the end about someone reusing the address, that isn't likely, it's built on the same cryptography primitives as your SSH keys, it's more likely nobody will ever use it again once you close the app.

[@goeiecool9999]

Yeah... Paying money for an onion address? To whom?

[@larry_the]

I don't trust anything with the corporate art style

[@estebanospina50]

i don't trust graphical interfaces

[@pissmilker2313]

I don't trust computers

[@レインレイン]

yea, im still not sure whether this is the new honeypot or not, gonna wait a week

[@fossforever512]

@@pissmilker2313 this is the based opinion to have Computers should be used in only extremely safe ways Example: I have a gaming pc running Windows but ALL it is for is gaming Meanwhile I have a fully FOSS thinkpad I use for my personal activities but even then I try to use it as securely as possible And currently an IPhone (I got as a gift as a teen) I’m going to replace soon with a Pinephone Pro again using as many security practices as possible Computers are useful tools, but they’re not you friends

[@ray8776]

@euclid overused term, opinion disregarded.

[@ohgodmanyo4662]

This has great piracy potential, although speed might be an issue

[@hashxz]

It actually isn't I tried it, it's very useable and it's speed is good

[@bittiger]

you could just send the .torrent files

[@ohgodmanyo4662]

@@bittiger true, but I was thinking this because to torrent, you need a VPN, but for this you can do it entirely for free because it's all P2P and I think everything hosted is randomly emitted from multiple hosts so that it is untraceable

[@cosmincaliin]

true, p2p mesh encrypted, this is awesome

[@AL-Hanafi1]

No you don't need vpn to torrent ​@@ohgodmanyo4662

[@Ricocossa1]

There's no way onionshare manages the addresses you get. That would be an absolute breach of privacy. It generates a key pair locally and starts an onion service on your machine.

[@udaynarayanmukherjee5208]

I had a similar problem for some other application. Turns out when it says that the storage is full, it meant the tmp file has reached maximum capacity. Increasing that tmp size solved the issue for me.

[@patricko1207]

Pro tip: make encrypted volume, hide .keys or recovery seed inside (Russian doll it if you’re schizo), host on onionshare from hardened Linux box for secure, anonymous and remote recovery of funds. Ideally create backups so that machine is not a single point of failure.

[@_idiot]

Just get a hardware wallet and hide in butthole

[@spacemeter3001]

@@_idiot Never visit a gay bar or go to prison in that case

[@_idiot]

@@spacemeter3001 oops, too late...

[@dreammfyre]

I remember FTPs back in the day when servers would have a folder where random people could just upload shit. Fun times. Back then finding stuff like anime was a literal treasure hunt. mIRC, FTPs, etc plus other obscure protocols I’ve forgotten the name of.

[@SB-qm5wg]

Yeah. Fun times :p

[@yandhi8884]

I remember one of my ex-friends managed an FTP server that managed one of his paid services. _We don’t talk about why he’s not my friend anymore._

[@fencino]

@@yandhi8884 what did he do? can't be that bad

[@ghsdude]

@expresso cool story

[@r0e404]

@@fencino ancient only fans

[@theesteward9150]

Waiting for the Mental Outlaw tor website to launch ;)

[@williamviloria]

Hey guys now i can show to my CyberSec college mates how cool i am

[@TheRisingMiles]

This looks GOATED

[@bioemiliano]

Finally, I can share the forbidden memes without the glowies knowing

[@yourpersonaldatadealer2239]

Someone should create a TOR site on how to grow onions. Just as a meme gardening site.

[@purplep3466]

Your personal data reader

[@yourpersonaldatadealer2239]

@@purplep3466 wanna buy some data?

[@Someone-ox1oh]

@@yourpersonaldatadealer2239 do you sell data in kilos ?

[@N.S.A.]

Even though it's says open source, can you really trust software that's just written by anyone?

[@debtminer4976]

Nope.. you have to learn and understand the code first. Thanks for the friendly reminder, NSA

[@guacfiend]

how are we supposed to be sure that the current "open-source" project that is on github is the same on the current source all users are using by the devs themselves?

[@HairEEck]

@@guacfiend shasum baby

[@guacfiend]

@@HairEEck I’m not familiar with this, is this some sort of Linux command that verifies software versions?

[@npswm1314]

@@guacfiend No.

[@kevin42]

Man, i miss Terry

[@notimportant3033]

"Oh wow! This service is perfect for talking about and planning [REDACTED]" - Regards, The CIA, the FBI and the ATF

[@alexandernyberg8668]

Don't forget about the NSA, Meta, and probably Russia too

[@haunter8201]

15:22 it generates a new key pair which is what the onion address is derived from

[@dreammfyre]

Man, just give me easy, anonymous internet. I wanna see some dude(s) like put up every blu-ray ever released and everyone who wanted got access to it with zero risk of the people hosting the server getting caught.

[@egg5474]

There’s one guy working on something akin to that but I don’t know how far away it is from release, as you could imagine a protocol that is the real deal would be… problematic to say the least. And I don’t know if those creating it want their heads on the chopping block just quite yet.

[@alex15095]

Owner-free filesystem?

[@sp.n7401]

IPFS is basically that, as long as theres one node that has the files, you will be able to access it with the hash. And other nodes will cache the files so it's distributed.

[@alex15095]

@@sp.n7401 From what I understand there's still a blacklist of certain hashes due to laws, technically you could fork the IPFS tree and remove the blacklist but other nodes will still not pass your blacklisted content. It's also not really meant to be anonymous, there's probably ways to figure out which nodes are hosting files and there's definitely ways to figure out who is accessing what files

[@sp.n7401]

@@alex15095 IPFS only has control over it's own nodes, like the nodes that host their own HTTP gateway. They won't be able to blacklist content from everyone else's nodes. Content is less likely to be taken down as long as other nodes seed it, but yeah, I'd have to look into privacy a bit more.

[@iwillnoteatzebugs]

a giant green light appeared over the sky, the glowies are glowing really hard as we speak , they are also seething hard so you might see a pinkish tint

[@norre_]

We all know that this service is going to be used for by a lot of users.

[@user-uo8ny1kj4c]

this might become the new megaupload

[@MrDoomGrey]

Cheese pizza?

[@user-uo8ny1kj4c]

@@MrDoomGrey thats for 4chan mirror sites.

[@norre_]

@@MrDoomGrey Exactly.

[@conando025]

Wow i found something before mental outlaw. I now fear myself

[@guacfiend]

How do we know that the current hosted 'open-source' project is the same hosted project being used by the devs themselves?

[@CircaSriYak]

Someone explain FOSS fundamentals for the newbie

[@guacfiend]

@@CircaSriYak apparently, there are 11 more newbies that are just as curious. :)

[@MaleficWeegee]

@@CircaSriYak you explain it, weenie.

[@5555Jacker]

You can't. So check the client code and protocol, and make sure that even if the server IS malicious, the hosters still can't do anything to you. In this case, as long as you're not downloading executables, giving out personal information, etc. you should be alright. EDIT: The above is assuming you're talking about those hosting OnionShare sites. If you mean the source code of what you yourself are using, the best way to check is by compiling it, getting the SHA-256 hash of the downloaded build, and verifying it against the hosted build's (watch for the build configuration's settings, though). Or you can take a deep dive in the source code to see if there's anything spooky, provided you have the time and knowledge, and just build and use that.

[@Jupiter__001_]

@@5555Jacker Thank you big-brain Sen. Armstrong.

[@LokiScarletWasHere]

Weird how you don't actually own the address. With the regular Tor server, it generates a key pair and if you backup the keys you can use the address again and again. You can also generate custom onionv3 addresses if you have enough time.

[@raphmd8209]

It's a mistake, you do own your key but they indeed are regenerated after restarting the app. Their might be a setting to change that inside the app

[@IngwiePhoenix]

onionv3 adresses? Never heared of that. Thanks for that tiny tidbit, im curious now. Been looking into i2p, tor and ipfs a lot lately :)

[@monolofiminimal]

I've been using this ever since someone on a privacy related subreddit was sharing something to me. It's really neat. I should get my family to start using it really.

[@thomaswinovich9391]

nice to see that chat is already being spammed after the video being up for 40 minutes

[@knownpenguin7573]

Share pictures of onions over tor using onionshare

[@ozenthelewdable5427]

Does this also protect me from Terry Davis' respectful bioluminescent African-American CIA agents?

[@zlikez]

dont know if anyone will see this but in the beginning when he says "the feds are not going to like this video" the like button lights up because he says "like this video" LOL

[@ZeroCool22]

😲

[@gfdb]

Notification gang where you at

[@porky1118]

0:18 But why do I need a special tool to setup websites on Tor? Setting up websites on Tor is already easier than setting up one on the clearnet. Tor: - just create a hidden service and specify the port mapping - optionally rent some server, but it should already work well from any PC, no matter, which network configuration you use. Clearnet: - rent some server, like a VPS, or configure your router correctly - get a static IP - preferably get a domain name and map the IP

[@porky1118]

@Unfunny guy4⑨ My Answer always gets deleted. I'll probably PM you.

[@porky1118]

​@Unfunny guy4⑨ No idea how to PM someone on KZbin. Basically I don't know a tutorial. But just have a look at my channel description, so you should be able to find something useful on my website or contact me via E-Mail.

[@squid1712]

Rule of thumb: if anyone is using glowy 3 letter boys as a way to advertize a service on the internet as a means to evade the 3 letter boys, that service is absolutely infested with glowy 3 letter boys.

[@o11k]

Small correction: the hidden services are hosted on your own computer, not their servers.

[@kenwu7]

Time to get the silk road back up and running 🤫

[@writheagainsoon]

"oh man the alphabet boys are not gonna like this video" damn better let all my homies know we need to find a new place to set up the trans socialist group chat ://// whatever will I do

[@JavierUhagonTorralvo]

relatable ngl

[@skullywulIy]

This might actual be useful for non-sensitive data

[@electricz3045]

Finally i can share all my secret anime wallpapers with anonymity

[@RadikAlice]

This is pretty cool! And while the limitations kinda suck, they're nothing short of understandable and reasonable

[@coc_champs]

Actually I have question how the host website works? Like canwe just drop a html page and it will run or we need to create a javascript app?

[@CommonWealthSnow]

It's surprising to me how clean the interface looks! Very nice

[@necromaster998]

where do you get these amazing glowie soyjacks?

[@midimusicforever]

This looks awesome! :)

[@tnlmemes38]

what linux distribution r u using

[@fatbeard8072]

Great informative video. I like finding useful Linux stuff like this, I can't wait to get back to my own PC, been having to use a friends Win 10 that I rebuilt for him otherwise I would have nothing.

[@Ultra289]

So you can set up something like a Google Drive with this thing without Google spying?

[@tobidegnon4409]

That's traversy media js tutorial, great channel for learning programming

[@mindblast3901]

1st Groovy

[@afallingtree9114]

my mans memes are next level *cultured*

[@1996Pinocchio]

5:10 If I'm not mistaken that's 521 mebibyte not megabyte.

[@Stalkerkoshka]

I've run into the no space left error. It actually has something to with with the GUI. If you use the CLI OnionShare it shouldn't throw that error.

[@unitedstates5117]

Just perfect! Thank you very much for the detailed steps and information. ♥♥ ♥♥ 10:4

[@franz3810]

this is the tip of the century. Thanks

[@porky1118]

Looks like it's also in the void repos :)

[@whitephosphorus15]

not a honeypot

[@ninny65]

Doesn't matter, your ethernet cable is tapped all the way up to the underwater sea cables

[@Conlexio]

yeah this is why you encryt traffic

[@marcello4258]

flatpaks which need to have access on the filesystem should need an override of the settings to do so

[@lucioferrando5994]

Lovely girlz u have on the page!!

[@framepointer]

i love the cia glowies in the thumbnail LOL

[@dieterhaase4336]

SALT IS LEGION!!

[@deoxal7947]

Demons, that means demons That's where the phrase comes from

[@afiqzx]

Wow downloading it right now

[@francoisdupont3082]

This is nice but running a dark website is already as simple as a single config file that basically forwards a port.

[@ColumbianSpirit]

Hi there

[@youssefgaaloul]

Maybe it generates an address then checks if has been already used by someone else, if not you will get it passed or a new one will be generated. If you have used one already they check, of no one got it in the time you were offline, then you can use it again. I hope I didnt formulate it all over the place

[@Puffem.]

I think I know why KZbin brought me to this channel

[@chraman169]

basedshare

[@thyscott6603]

I like how you have that folder "NRA_hack" still there.

[@SSKJ64]

windows version when

[@theone-tg4ey]

Yee

[@kecoje]

Prvo lajk pa gledam

[@elnkr2603]

Great stuff

[@danygosset7867]

perfect, I have already made bitcoin thanks to it, great program to put a fake page, in short, but a question, how to be referenced on the tor search engine?

[@HNTHub]

Algo Hakz!

[@zZGzHD]

man i wonder how this one is gonna get false flagged down

[@thyscott6603]

Wanted to see the spicymemes myself but your site is down? If I can pull the files I can keep it up for the sake of the video.

[@Barakon]

Can I sell things on an onionshare website?

[@geestwagen4614]

The gratis sofware movement

[@Remigrator]

You really just discovered this TODAY?? Wow, next time just ASK lol

[@archygrey9093]

It takes time to create videos like this

[@SomeRandomPiggo]

found this a year or something ago, really cool!

[@goldenratio183]

Now this is content!

[@sveu3pm]

sharing files -you can do this with private torent also you dont need extra onionshare app

[@julikaiba]

can someone tell me where i can find the pic at 11:30? honestly looks pretty cool

[@rrhyast]

one of the best youtubers :D

[@Filler382]

What books do you read to be so well-rounded in tech stuff?

[@StudiosJJay]

4chan /g/ autists lol

[@PeliPelaaja]

Lain is a great anime.

[@skeptical1337]

The tritium boys are fuming

[@ohgodmanyo4662]

Does it require port forwarding or nah?

[@DUDA-__-]

Lets all love lain.

[@oliversmeeton]

The chat didn't take long to become bots spamming

[@dans4125]

good thing the alphabets have been running nodes since it's existence and was a government product in the first place

[@glowingone1774]

DO NOT USE THIS, ITS BACK DOORED BY GLOWING ONES ;)

[@estebanospina50]

i really think there should be a line of code, or even some vulnerability exploited by the glowies

[@xinshengbing5743]

FBI, CIA, FED ect Mental Outlaw: THE ALPHABET BOIS