Host Intrusion Prevention System & Whitelisting software is used on web servers to protect from intrusion.

The Kernel of the operating system is where actually the software meets the hardware. Once the Kernel has been compromised, the underlying physical environment including all devices is under the control of the attacker.

If the attacker HAS COMPROMISED YOUR WEB SERVER -  It's more that likely further code uploading and execution can compromise the VirtualBox & Host OS.

I assume code uploading and execution can compromise anything running in RAM as well. The nice thing would be that it all goes away with a power down. I have to bring myself up the  curve on quite a few things, but I still think the idea has some merit.

Vesp, have to tried to go through that hidden services for newbie doc? I started here:

hxxp://tor2web.org/config

I emailed them asking about some of the missing very important files. I actually got a response from Aaron Swartz.

he only gives out tor2web.org.crt & tor2web.org.key when they trust people to run an official site. Not entirely sure what that means, but I assume once folks start getting connected/playing around they have some way of testing your setup. Who knows.
He suggested in the mean time using self-signed certificates from here:

hxxp://www.akadia.com/services/ssh_test_certificate.html


I never hosted anything outside of windows server, so I was at square one with apache yesterday. I am going to dive into this today:

hxxps://www.torproject.org/docs/tor-hidden-service.html.en

I am starting to think the best way to do this is just with a TOR router.

https://trac.torproject.org/projects/tor/wiki/doc/Torouter and this... http://www.heise.de/tr/artikel/Tor-im-Router-1159154.html (needs translation, easy via chrome browser) and also this: http://www.geekosystem.com/tor-router/

There is a lot for me to look into... I keep running into other things but it seems like a Tor Router is the best solution to this problem, no?

Any disadvantages to the Tor Router? (besides it not being finished..)