TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Ask HN: How to create an anonymous site?

88 pointsby Murkinover 11 years ago
The reasons are plenty, free speech, regulation and even criminal (piratebay?)<p>How can one register a domain anonymously and host a site without anyone being able to trace the owner&#x27;s identity ?

18 comments

patio11over 11 years ago
Much like security, you pick your countermeasures in advance in the hopes of raising the cost of an attacker to penetrating your security. You&#x27;re not anonymous. You&#x27;re anonymous to an adversary with a given amount of technical&#x2F;legal&#x2F;intelligence&#x2F;etc resources to bring to bear on deanonimizing you.<p>People will probably give you links which describe adequate methods for securing you against adversaries without $1,000 or equivalent amounts of brainsweat. If that&#x27;s your adversary, there. May you execute properly.<p>If your theorized adversary is a nation state, pick another adversary. You&#x27;re guaranteed to lose that fight in the long run. If you bid the price of your identity up to $5 million, they will counter with &quot;We routinely pay that to kill mosquitoes&quot; and mean that <i>entirely</i> literally.
评论 #7262971 未加载
评论 #7264007 未加载
yohaover 11 years ago
Don&#x27;t.<p>More specifically, if you truly care for anonymity, you won&#x27;t be using a plain DNS+Web site. Instead, you should go for Freenet [1] or a Tor-hosted website [2].<p>[1] <a href="https://freenetproject.org/" rel="nofollow">https:&#x2F;&#x2F;freenetproject.org&#x2F;</a><p>[2] <a href="https://www.torproject.org/docs/tor-hidden-service.html.en" rel="nofollow">https:&#x2F;&#x2F;www.torproject.org&#x2F;docs&#x2F;tor-hidden-service.html.en</a>
评论 #7262843 未加载
评论 #7263045 未加载
igvadaimonover 11 years ago
Here are a couple of interesting links:<p><a href="http://untraceableblog.com/" rel="nofollow">http:&#x2F;&#x2F;untraceableblog.com&#x2F;</a><p><a href="http://voidnull.sdf.org/" rel="nofollow">http:&#x2F;&#x2F;voidnull.sdf.org&#x2F;</a><p>To answer your questions - you can buy domain for bitcoins and use some free hosting like Wordpress or Github Pages.
评论 #7263205 未加载
评论 #7262841 未加载
captainmuonover 11 years ago
Besides the technical measures in the other comments, there are a bunch of other tricks that might be useful. (Please don&#x27;t take this as advice, but just as a thought experiment! If I were writing a spy novel, these are some things my characters would do.)<p>Find a homeless person, and ask him&#x2F;her to register a bank account in exchange for some cash or a meal. Use that account to set up your website anonymously. You&#x27;ll find that you need to dirten money if running such an operation - reverse laundering or taking &quot;clean&quot; money and putting it untracably into the business. Such a proxy account is a vital ingredient.<p>Don&#x27;t rely on Tor alone. It might be completely subverted, you wouldn&#x27;t know until it&#x27;s too late. Buy access to a botnet and route your stuff over it.<p>Have multiple servers. If you have one single server, its easy to trace. Either by brute force: the ISPs disconnect&#x2F;slow down 50% of customers for a split second, depending on wheter your site went down or not they know in which half you are, repeat until they find you. There are much more sophisticated techniques that don&#x27;t require active interference. But if you have at least two or three identical servers at different locations, it makes it a lot harder to catch you. Don&#x27;t forget tamper-proofing your servers.<p>Have trustworthy accomplices. Generally, the less people you tell what you are doing, the better. But if you have a close circle of people you can really trust, it becomes much easier to pull this off. You can work from multiple locations, give each other alibis, etc..<p>Build fake personas. Don&#x27;t just take a pseudonym, but create fake identities. Keep records on their interests, their motivations, what you disclosed about them. The purpose is to throw investigators off. You should be aware of techniques used by them, such as behavioral analysis, stilistic analysis, etc.. Working with accomplices can help alot in creating these fake identities and concealing your own (e.g. writing style).<p>Go somewhere safe. If possible, move your servers, or even yourself, somewhere where what you are doing is not punishable, or the authorities can be bribed.<p>This list could go on for ever... I&#x27;m not sure how practical many of these ideas are, but one thing is clear, you&#x27;ll need a certain amount of &quot;criminal energy&quot; to pull this off - no matter whether your intentions are criminal or not. (Disclaimer: I&#x27;m too pussy to actually have done any of the above, so it may or may not work :-))
austerityover 11 years ago
1. Buy BTC with cash<p>2. Buy a domain with BTC via Tor<p>3. Buy hosting with BTC via Tor<p>4. Do not accidentally leak your identity in one of million possible ways<p>#1-3 are pretty easy, but #4 is next to impossible. If nobody cares about you there might be some small room for error. But generally it takes one smallest mistake and you are ultimately busted.
评论 #7262866 未加载
评论 #7262913 未加载
评论 #7262829 未加载
wellboyover 11 years ago
The untraceableblog.com below is a great resource.<p>However, in the end, there is always text analysis though that can give your identity away, which the untraceable blog does not address.<p>That&#x27;s why you possibly need a ghost writer that you provide with a script or a robot audio recording if you want to go 100% sure. You need to be able to trust your ghostwriter a 100% though then. :)
评论 #7262799 未加载
p4bl0over 11 years ago
I would go with a Tor [1] hidden service or an EepSite on I2P [2].<p>Both are easy to setup and are accessible by anyone using &quot;inproxies&quot; such as onion.to or i2p.us.<p>Another advantage is that you can host the sites anywhere even behind a firewall or a NAT as long as the computer it&#x27;s hosted on can run Tor or I2P.<p>I personally have a preference for I2P, since this is its main purpose while Tor&#x27;s hidden services are not the primary purpose of Tor (which is to anonymize users on the clearnet).<p>[1] <a href="https://www.torproject.org/" rel="nofollow">https:&#x2F;&#x2F;www.torproject.org&#x2F;</a><p>[2] <a href="https://geti2p.net/" rel="nofollow">https:&#x2F;&#x2F;geti2p.net&#x2F;</a>
tiatiaover 11 years ago
Take this as a start: <a href="http://grugq.github.io/presentations/Keynote_The_Grugq_-_OPSEC_for_Russians.pdf" rel="nofollow">http:&#x2F;&#x2F;grugq.github.io&#x2F;presentations&#x2F;Keynote_The_Grugq_-_OPS...</a>
评论 #7264283 未加载
tmikaeldover 11 years ago
Maybe someone with experience of such hosting? Like: <a href="http://www.nearlyfreespeech.net" rel="nofollow">http:&#x2F;&#x2F;www.nearlyfreespeech.net</a><p>I should add: Goes under US Law, so forget pirating or illegal content.
评论 #7264336 未加载
xrctlover 11 years ago
I think most answers here are over thinking it; I do not think he wants a website that can defeat the NSA, just one where the service provider could get subpoenaed and not lead them to him.<p>So, just buy webhosting with Bitcoin at somewhere that does not require contact details.<p>e.g.<p><a href="http://www.orangewebsite.com/" rel="nofollow">http:&#x2F;&#x2F;www.orangewebsite.com&#x2F;</a><p><a href="http://bitcoinwebhosting.net/" rel="nofollow">http:&#x2F;&#x2F;bitcoinwebhosting.net&#x2F;</a><p>Sign up at the local library to cloak that IP then use tor after that if you think you will have a dedicated adversary.
anongridover 11 years ago
It is not as much creating an anonymous website as it is about protecting the users (keeping their anonymity) and their content (from prying eyes). A service can be in plain sight, but if it employs the correct (often needed - extreme) practices, it can provide its users with this level of confidence. I happen to be a Co-Founder of such a service :-) www.anongrid.com is an extremely secure and anonymous content sharing service. still in its infancy but you&#x27;re welcome to check it out and see what I mean.
evgenover 11 years ago
If you need to ask these questions you are not qualified to run such a site, or at least not to ask anyone else to trust that you are not going to screw up when setting it up or at some point in the future and break anonymity. The more you move away from &quot;free speech&quot; to avoiding regulation and toward criminal activity the greater the chance that someone out there will actually try to see how good you really are, and then your whole house of cards will fall down. Seriously, don&#x27;t.
评论 #7262761 未加载
评论 #7262850 未加载
cturhanover 11 years ago
Use subdomain on any known websites like <a href="http://anonymous.wordpress.com" rel="nofollow">http:&#x2F;&#x2F;anonymous.wordpress.com</a> ?
bdcravensover 11 years ago
Depending on what you&#x27;re trying to accomplish, couldn&#x27;t you drop content on the blockchain? Not a traditional website, but relatively anonymous (depending on how you move the coin), and more importantly, it can&#x27;t be seized or taken down (kinda scary when you think about the potentially implications for everyone who downloads the blockchain)
gesmanover 11 years ago
Launching and maintaining fully anon site is close to impossible. And maybe not worth a hassle depending on your purpose of course.<p>Instead - register Twitter nick and link your tweets to pastebin or similar repository where you&#x27;d post something worthy of reading.<p>Use Tor for all above.
rjzzleepover 11 years ago
if you host it yourself, don&#x27;t forget to clean up your access logs. you might want to actually fill them with invalid data, rather than completely deleting them.
thesorrowover 11 years ago
What is really hard is to have a secure (SSL) anonymous website with a valid SSL Cert.
评论 #7270828 未加载
kungpooeyover 11 years ago
For how long? Get a dyndns pro account, laptop(s) and host the site from multiple coffee shops. I didn&#x27;t give this much thought, internet advice eh.
评论 #7263778 未加载