Tor 0.4.9.16 (Nov 4, 2026) is an emergency release with only a handful of fixes for directory authorities.

Tor describes a "thundering herd": many outdated clients in restart loops repeatedly fetch directory information. Until it has a better long-term solution, the authorities will let those older clients rejoin to help stabilize load.

https://forum.torproject.org/t/security-release-0-4-9-16/22372

#Tor

A statement on the Tor Project's relationship with Mullvad

Recent concerns about a political donation by a Mullvad co-founder have raised questions about the Tor Project's funding relationship with the company. We are not terminating the relationship but are setting clear boundaries on our relationship with Mullvad.

#mullvad #tor

https://blog.torproject.org/on-tor-relationship-with-mullvad/

#Arti 2.8.0 released

https://blog.torproject.org/arti_2_8_0_released/

#Tor #Rust #cybersecurity #privacy #anonymity #FOSS

Tor relay and bridge operators: v2.2.1 is out 🧅🚀

https://github.com/r3bo0tbx1/tor-guard-relay/releases/tag/v2.2.1

Tor Guard Relay now ships Tor 0.4.9.15 and its new directory-request DoS defenses.

🏗️ Verified upstream source builds
💻 Stable + edge · AMD64 + ARM64

No new mandatory torrc lines. Leave the new rate-limit settings unset so network consensus controls them.

Back up, upgrade and verify the running Tor version.

🌐 https://brokenbot.net/v2.2.1/
http://brokenbotqk7v7y3xpvr6ik7rofivu2dsr5rpkx6xons45reksaykuad.onion/v2.2.1/

#Tor #Privacy #SelfHosting

New Release: #Tor Browser 16.0

https://blog.torproject.org/new-release-tor-browser-160/

#privacy #anonymity #cybersecurity #FOSS

All good, our .onion services should be back in action after all the updates. Enjoy! #Tor

Our #Tor .onion services are all going down for OS and service upgrades, be back in an hour or two!

#Tails 7.15.1

https://tails.net/news/version_7.15.1/

#privacy #anonymity #FOSS #Linux #Tor #cybersecurity

How I got over 300 #Tor exit nodes removed

https://kaba.cx/posts/20261020_Tor/

#cybersecurity #privacy #anonymity #FOSS

New Release: #Tor Browser 15.0.26

https://blog.torproject.org/new-release-tor-browser-15026/

#privacy #cybersecurity #FOSS #anonymity

Hmm, remember to never use ssh or email over Tor, lol.

https://mastodon.scot/@kim_harding/117484667363059786

#tor

Last month in #FDroid (LMIF) is live:

* two more F-Droid and Basic releases
* @kirschner talks #fdroidcl
* #XMPP #Conversations_IM free everywhere
* #OSMAnd fixed for #OpenGL 1 devices
* #SMSecure can import #SilenceIM backups
* @linwood better Butterfly
* #NewsBlur nicer on tablets
* #RethinkDNS UI makeover
* #Tor #TorVPN making-of
* #NewPipe looking for paid devs
+ 299 more apps, read note!
& 917 updated
- 7 archived

L-AI-d growth: https://f-droid.org/2026/10/16/twif.html

I finally added something I hope I never need: encrypted recovery for my Tor relays.

Replacing a VPS is straightforward. Preserving the relay’s identity takes preparation.

Tor Guard Relay v2.2.0 can now:
🔐 Back up keys, torrc and transport state in an encrypted archive
✅ Verify the complete archive before you need it
🧰 Restore into an offline staging directory for inspection before activation

It also brings clearer health diagnostics and tighter checks before publishing container images.

I wrote up the changes, with screenshots from a real deployment:
🔗 https://brokenbot.net/v2.2.0

Fellow relay operators: what does your backup and recovery setup look like? Have you actually rehearsed a restore?

#Tor #SelfHosting #OpenSource

New Release: #Tor Browser 15.0.25

https://blog.torproject.org/new-release-tor-browser-15025/

#FOSS #privacy #anonymity #cybersecurity

Combining Git, Tor and WebRTC into a Messaging App

This is the latest version of the P2P messaging project. It’s a fairly a unique stack and architecture in contrast to the traditional approach with mainstream messaging apps. To put it briefly, its a Rust-based frontend with a Git-server backend, which can be used to establish a E2EE connection.

Features:

No installation
No registration
PWA
Android
TUI
WebRTC
Tor routing
TURN server
Git-host backend
Local-first
Encrypted-at-rest
Signal protocol
Post Quantum cryptography
Calls
File-transfer

IMPORTANT DISCLAIMER: While this is aiming to provide a secure experience, it’s a work-in-progress and far from finished. It is unreviewed and unaudited. I’m sharing here for testing, feedback and demo purposes only. Pease use it responsibly.

https://glitr.io

#RustLang #P2P #Cryptography #WebRTC #Tor #E2EE #LocalFirst #Decentralized

Alt...

glitr.io

What if we went back to a dumb phone?

For one week, I want to carry only my old Nokia 1650 when I go out. My smartphone stays at home, with all internet traffic routed through Tor.

Less tracking, fewer distractions, more freedom.

Has anyone tried living this way? How did it go?

#Privacy #DigitalMinimalism #DumbPhone #Tor #Surveillance

Our .onion services and relays are back. A short detour changing some performance options, rebuilding world, updating packages, but all is good and updated to latest tor. #DefCon #Tor

Our #DefCon #Tor .onion services and relays are all going down for upgrades!

Meet KEMchatka: an experimental, serverless P2P terminal chat over Tor hidden services.

No accounts, no port forwarding, zero disk logging.

​Features hybrid post-quantum encryption: X25519 + ML-KEM-1024 (FIPS 203) combined via HKDF-SHA512 to defeat "harvest now, decrypt later" attacks. Simple out-of-band setup.

​When privacy is under threat, build tools that protect it.

https://github.com/bashcore/kemchatka

​ #PostQuantum #Tor #Python #CyberSecurity #Privacy #OpenSource #Cryptography

Xeres v0.7.0
[https://xeres.io/]
[https://github.com/zapek/Xeres]

Xeres is a Peer-to-Peer (Friend-to-Friend), decentralized, encrypted and secure application designed for communication and sharing.

Features:
Peer-to-Peer (Friend-to-Friend), fully decentralized
No censorship. Cannot be censored
Compatible with Retroshare 0.6.6 or higher
🛠 Hardware accelerated encryption
🖥 Modern looking desktop user interface with several themes including dark mode
Remote access
Free software (GPL), source code on GitHub
Available for Windows, Linux and MacOS

Changelog:
[https://github.com/zapek/Xeres/releases/tag/v0.7.0]

#Retroshare #Tor #I2P

https://bastyon.com/post?s=deb1f87219fa0073456359dd501497808046290842c723e05db52909c3fddbbb&ref=PPGbadoQuQGhApEZeRr5tv5zkY2xSdLQhQ

We wrote an honest comparison of Zerion against Signal, WhatsApp, Telegram, Threema, Wire, Session, Cwtch and Tox.

Honest meaning: Signal gets credit for pioneering post-quantum key exchange, Cwtch is genuinely close in spirit, and each app is the right call for some threat model.

Where Zerion stands alone: post-quantum encryption on every single message, and everything (including calls) over Tor.

https://zerion.chat/blog/zerion-vs-mainstream-messengers.html

#privacy #tor #encryption #grapheneos #fdroid #android #p2p

Built something I’ve wanted for a while...
An open-source Docker container that makes running a Tor relay actually simple and reliable.

One command. Self-healing. Multi-arch. Runs everywhere from Raspberry Pi to VPS

🔗 https://github.com/r3bo0tbx1/tor-guard-relay

If you care about privacy infrastructure:
🧱 Try it out
🐛 Report bugs
💡 Suggest features
⭐ Star it to help others discover it

Maintaining this in my free time, donation info’s in the README (and please support @torproject, @eff and @privacyguides too).

Protecting privacy, one relay at a time ✨

#Tor #Privacy #OpenSource #Docker #FOSS #SelfHosting #Infosec

Is there facility to run the phone app via TOR network, to hide user IP from the relay?

#Holos #Tor #Fediverse #Privacy #Anonymity #ActivityPub

Inform your friends and family about these tools.

#Briar ... https://briarproject.org

"Censorship-resistant peer-to-peer messaging that bypasses centralized servers. Connect via Bluetooth, Wi-Fi or Tor, with privacy built-in."

#Retroshare ... https://retroshare.cc

"Retroshare establish encrypted connections between you and your friends to create a network of computers, and provides various distributed services on top of it: forums, channels, chat, mail... Retroshare is fully decentralized, and designed to provide maximum security and anonymity to its users beyond direct friends. Retroshare is entirely free and open-source software. It is available on #Android, #Linux, #MacOS and #Windows. There are no hidden costs, no ads and no terms of service."

#RicochetRefresh ... https://www.ricochetrefresh.net

"Ricochet Refresh is an open-source project to allow private and anonymous instant messaging."

#OnionShare ... https://onionshare.org

"OnionShare is an open-source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network."

#DeltaChat ... https://delta.chat

"Delta Chat is a decentralized and secure messenger app."

#Bitmessage ... https://bitmessage.org

"Bitmessage is a P2P communications protocol used to send encrypted messages to another person or to many subscribers. It is decentralized and trustless, meaning that you need-not inherently trust any entities like root certificate authorities. It uses strong authentication which means that the sender of a message cannot be spoofed, and it aims to hide "non-content" data, like the sender and receiver of messages, from passive eavesdroppers like those running warrantless wiretapping programs."

#TorBrowser ... https://www.torproject.org/download

"Protect yourself against tracking, surveillance, and censorship."

#I2P ... https://geti2p.net

"The Invisible Internet Project (I2P) is a fully encrypted private network layer. It protects your activity and location. Every day people use the network to connect with people without worry of being tracked or their data being collected. In some cases people rely on the network when they need to be discrete or are doing sensitive work."

#Hyphanet ... https://www.hyphanet.org/

"Hyphanet is peer-to-peer network for censorship-resistant and privacy-respecting publishing and communication. The original Freenet."

#BitChan ... https://github.com/813492291816/BitChan

"BitChan is a decentralized anonymous imageboard inspired by BitBoard and built on top of Bitmessage with Tor, I2P, and GnuPG."

#DarkMX ... https://darkmx.app

"DarkMX is a new decentralized communication app that utilizes Tor hidden services to allow you to easily have an anonymous, reliable, and censorship-resistant presence on the internet. You can chat. You can share files. You can search other people's files. You can keep a contact list and send private messages to your friends. You can create your own custom .onion site, available to anyone with a Tor Browser."

#Decentralized #TOR #AntiSurveillance #Anonymity #Anonymous #Privacy #Filesharing #Networking #Communication #P2P #F2F #PeerToPeer #Censorship #AntiCensorship #FreeSpeech

I figured out several ways to run DarkMX on a headless server without GUI. This allows me to install it on a remote server without any desktop environment and run the software as a daemon without the GUI.

First I used the X forwarding feature of SSH to pipe the GUI to a local machine. On that machine I did all the configuration inside the GUI. Then I closed the program.

Then on the remote machine I used 'xvfb' to run DarkMX as a nohup'd daemon with a dummy GUI buffer. That way I don't need to be connected to the GUI from a local machine and the application will still run. It also uses less RAM without the GUI.

There are other ways to do this, such as VNC and xpra. I just chose the quickest, dirtiest method in this case.

Why would I go to all that trouble? Well, I don't need to, but there are some people who might need to publish while maintaining strict anonymity. So they would need tools like DarkMX and TOR. For me it's just fun.

DarkMX operates over the TOR privacy preserving network. As a result the location of my peer is hidden and extremely hard to impossible for an adversary to locate. So when I publish something, such as a letter, or paper, or opinion, anyone can download it since censoring it is not viable. It ensures that my speech remains free and available to the general public. Now when I author essays, papers, homiles and such, I can publish them as file shares, and I can publish them simultaneously as a TOR hidden website with the built-in webserver feature. So readers don't need DarkMX to read my files--they can just fire up TOR Browser or use a TOR proxy with their web browser. If they want to snarf a whole directory they can install DarkMX, or use a script to snarf them via TOR.

If you are inclined to fiddle around with installing this software on a headless server, please share the techniques and tools used that suit you.

(DarkMX download site: https://darkmx.app)

#DarkMX #P2P #FileSharing #Anonymous #SelfHosting #TOR #OnionNetwork #Censorship

@selfhosted@a.gup.pe @infostorm@a.gup.pe @darknet@a.gup.pe infosec@a.gup.pe

"Hosting a Tor hidden service — also known as an onion site — typically requires in-depth technical skills and manual configuration. With TorServ, you can host a static website anonymously in seconds, without touching any config files."

#TorServ #TOR #Onions #OnionNetwork #Privacy #Anonymity

@selfhosting@a.gup.pe
@infosec@a.gup.pe
@linux@a.gup.pe
@networks@a.gup.pe
@crypto@a.gup.pe
@darknet@a.gup.pe
@privacy@a.gup.pe
@infostorm@a.gup.pe

Alt...

Two slices of red onion stacked one atop the other. The onion symbolizes TOR, The Onion Network, and its multiple layers of cryptographic obfuscation.