>>100143969
>Make sure that your website can run with the minimal amount of JS (or none at all if possible). JS is often a vector for deanonymising exploits.
I know about the tracking and the cross site scripting stuff, I will try to develop not using any js
>Make sure that your hidden server cannot under any circumstances access the clear net. Do this by running it on a VM and setting up the tor bridge as its only network interface. Some hidden services were uncovered like this.
Interesting never thought about that, I guess it makes sense in terms of isolation and controlling what comes in and out almost like in a sandbox env
>Do not post code snippets from the backend on the clear net. Do not post under a username that you are already using on the clear net. Someone (I think it was the silk road admin) got caught because he posted a snippet of his website's backend on stack overflow.
Yea I'm careful with that, my irl job is a big code base, millions of users and we have already security measures in place so I know +- how to not fuck up posting identifiable things, I use SO a lot but if you look up generic stuff similar to what you want you can find a solution easily, you don't need to copy and paste stuff like a monkey
>Do not brag about your super secret website irl. Do not even acknowledge its existence.
I'm a really private person, so I wouldn't do that, this is more a passion project I always wanted to build
>Always assume that the feds have infiltrated your mod team and even potentially have access to your back end.
I know DPR would ask for the real Id's to hire admins, mods or trust people; but even after that they stole or fucked him lol.. ideally I won't have to reach that point, trusting people irl is hard I'm sure here will be harder, depending on the needs and scale I would need people but for now I shouldn't worry about it

Thank you for the ideas, I will look more into it

Back | Go to board

Board:

/g/

Thread:

Hypothetically speaking, let's say I have an idea and can implement a secure market using only monero, how can I make the server I'm buying…