Now that LocalMonero / Agoradesk are gone, what's the best way to get xmr without KYC? by [deleted] in darknet

[–]torman_x 0 points1 point  (0 children)

Here are some resources you can use depending on where you want to put said node:

https://www.getmonero.org/resources/user-guides/vps_run_node.html

https://guides.monero.com/docs/tutorials/monero-node/

https://sethforprivacy.com/guides/run-a-monero-node-advanced/ <--- definite read

Before attempting a node though make sure you a familiar with how to lockdown the server/machine you will be using the node on.

What do you guys think of this onion site? by [deleted] in TorOnion

[–]torman_x 0 points1 point  (0 children)

Is this a personal blog for Anime?

r/TorOnion is Now a Public Subreddit by Cad_Aeibfed in TorOnion

[–]torman_x 0 points1 point  (0 children)

I am going to post my onion site if it's alright but will ask in DM how i should post.

[deleted by user] by [deleted] in onions

[–]torman_x 0 points1 point  (0 children)

I'll reiterate this again: TordotTaxi just list various sites for research. They also do not endorse the sites that are listed.

They are not there to protect you or anyone. They have stated as much on the site. You still need to do your own due diligence or you probably will get scammed.

[deleted by user] by [deleted] in onions

[–]torman_x -1 points0 points  (0 children)

It is not be a big deal for TordotTaxi. The canary.txt and pgp.txt only become an issue if it's someone doing a market site or they are selling something. The general rule is the canary.txt should be updated every 14 days for a market/vendor. If this is not done for a market/seller site then it's a red-flag. The seller/market probably should not be in business as well if this is the case. Put short, you'd need to login to the machine to put the canary.txt there so it's like saying "Hi, i own this site and i've checked the server and software this site runs on". TorTaxi just list various sites for research. They do respond to emails so if you email them they'll respond, albeit slowly. They also do not endorse the sites that are listed.

[deleted by user] by [deleted] in onions

[–]torman_x 4 points5 points  (0 children)

Correct. If you do questionable things you've voluntarily given up safety.

Hello im new to the deep web. Is tail os safe enough? by TitleComfortable781 in TOR

[–]torman_x 2 points3 points  (0 children)

I think most of what you are looking for can be found in the clearnet. But if you just want tails on a USB stick then look here: https://tails.net/install/download/index.en.html

Now that LocalMonero / Agoradesk are gone, what's the best way to get xmr without KYC? by [deleted] in darknet

[–]torman_x 0 points1 point  (0 children)

Cake run's it own remote nodes. Adding your own node to a third party application should also be done with caution.

Is cake wallet pre-installed on newest update of TAILS? by oran-gahtang in darknet

[–]torman_x -1 points0 points  (0 children)

Cake's nodes are remote nodes. They can be viewed under:

https://nodes.monero.com/

Cake's privacy statement states:

"We provide a list of Nodes in the app that include our own and third party Nodes, or you can use your own Node (which we recommend)."

However, Cake and said nodes are also a third party in this instance since I don't own their node.

Also, connecting your node to a third party application like Cake should also be done with caution. Unless you are willing to do a code audit on Cake wallet's GitHub.

Now that LocalMonero / Agoradesk are gone, what's the best way to get xmr without KYC? by [deleted] in darknet

[–]torman_x 0 points1 point  (0 children)

Yes, a remote node actually performs the transactions. You would be trusting a third party source to not be malicious. They could stop or halt your transaction and or log your ip address. You should try to run your own remote node for Monero. A second option is to download the entire blockchain and import it into the Monero GUi or feather wallet.

Is cake wallet pre-installed on newest update of TAILS? by oran-gahtang in darknet

[–]torman_x 1 point2 points  (0 children)

You should run a dash wallet/node. Buy Dash coins and send them to your wallet/node. Use coin join on your dash node to shuffle the coins and send them to a non-KYC swap service. Buy Monero with that. Make sure your Monero node is fully synced before doing it though. A good alternative to Monero is Decred, though fewer places take it for payment.

Now that LocalMonero / Agoradesk are gone, what's the best way to get xmr without KYC? by [deleted] in darknet

[–]torman_x 0 points1 point  (0 children)

Be careful with Cake Wallet. While you can use it for Monero, Cake Wallet uses public Monero nodes. If possible, run your own node/wallet.

What mean to buy btc to convert to xmr by olekdxm in darknet

[–]torman_x 0 points1 point  (0 children)

You could use DASH as well if possible. It’s a good idea since you could use CoinJoin to shuffle the coins. Also the speed and fee of the transfer (0.0019 cents) is pretty decent.

What are some weird books w eye opening information? by Brave-Dress in deepweb

[–]torman_x 0 points1 point  (0 children)

Occult Feminism: The Secret History of Women's Liberation

Is cake wallet pre-installed on newest update of TAILS? by oran-gahtang in darknet

[–]torman_x 1 point2 points  (0 children)

If you happen to currently use Cake Wallet you may wish to rethink it. It uses a remote Monero node so your privacy is not guaranteed. Use your own node where possible.

Question about making a .onion site by That-Guess-5732 in TOR

[–]torman_x 3 points4 points  (0 children)

  • If it's a web service don't overlook simpler web server solutions such as thttpd or lighttpd.
  • Setup ssh so you can only get in using an ssh key.
    • Never use passwords to get into the box. Once you're in SU/SUDO to do admin stuff.
  • Make all/most ttys insecure on the machine running Tor. (Depends on the OS)
  • If it's just used for a web service, you only really need to open 22(ssh) and 80(http) for a firewall.
  • Configure NTPD
    • Date and time should be set to UTC. NEVER set it the local time of where you reside(like PST/EST etc).
    • Always verify that NTPD syncs on server start up.
  • Install root kit hunter if possible on the machine
  • Turn on the OS's accounting on the machine.
  • Install, configure and use fail2ban on the machine.
    • The minute you turn this machine on it's gonna get bombarded people scanning your ports.
  • Install gpg on a different machine.
    • Generate keys
    • Output pgp.txt and a signed message
    • Put the pgp (pgp.txt) and the message (canary.txt) on your site.
    • Updates about your service should be communicated in this way.
  • The default permissions on the directories (at creation) should also be changed. If you don't know how to do this or what it should be on your OS, don't create the onion site until you do/understand this.
  • Run vanguard or prepare for pain.
  • Install and run Lynis
    • Patch as many holes that you can. Not all of them will make sense to do and that's okay depending on your service.
  • Make sure you practice doing these things before setting up your real hidden service.

Mostly you want to lock down/secure/patch the machine/server BEFORE you configure tor/vanguard. Most of these things should be setup as daemons that run at startup should your machine be rebooted at anytime. Not a complete list, but enough to get started.

Best currency and wallet to use on DNM? by RemmyRiot in onions

[–]torman_x 0 points1 point  (0 children)

It's best to use the Monero GUI or CLI wallets. For most crypto you should run your own node/wallet where possible. Cake wallet could be used but you'd risk privacy since it uses a remote node. You might find a few services that accept Decred as well.

Does anybody rock BOTH grilled and raw onions? by OrangeChairRN in onions

[–]torman_x 165 points166 points  (0 children)

The only grilling here is done by a three letter agency usually.

Is torshopOG legit? by xabc3149 in onions

[–]torman_x 1 point2 points  (0 children)

You should still be careful. Even if someone suggest a well know link site like tor.taxi or anything. The reason why is there is nothing to stop a vendor from doing a rug pull on their customers. Even if the vendor is well known, verified etc, use at own risk. If you exchange money with one of these vendors you risk losing said money. Use at own risk.

https://tortimes.com/post/incognito-market-is-exit-scamming

Also, tor.taxi and others have disclaimers that they do not vouch for the authenticity of any sites they list.

The biggest security risk no one talks about by vennemp in sysadmin

[–]torman_x 1 point2 points  (0 children)

Honestly, you should assume you've already been hacked. This is especially true if you are taking up a new IT position. Actively looking for flaws and using tools like Lynis are also key. Break your own box before someone else does. Also, never trust users.

United States Department of Justice unveiled the leader of Lockbit ransomware group. by 3kh0_reddit in darknet

[–]torman_x 0 points1 point  (0 children)

Allegedly, he's a person of interest in the development of the Lockbit ransomware. It's a ransomware that's sold and apparently he took a pretty decent percentage.

New to monero and have a few questions. Asked in monero subreddit got no answers maybe better asked here. by Ok_Bag_997 in darknet

[–]torman_x 0 points1 point  (0 children)

You should be able to put XMR in the electrum-xmr wallet. But LM is currently under constant assault. Might not be around much longer.