In countries with aggressive internet filtering (e.g., China’s GFW, Russian TSPU), normal cloud storage is blocked. Onion FS, routing through Tor bridges, can synchronize files between a journalist inside the country and an editor outside—without revealing IPs or file metadata.
With an Onion FS structure (specifically utilizing hidden volumes found in software like VeraCrypt), you can surrender the "outer" key. The adversary mounts the outer volume and sees the decoy data. They cannot mathematically prove that a hidden volume exists within the free space of that outer volume. onion fs
While "OnionFS" was the specific name of an early tool, the technology has been integrated into modern Custom Firmware (CFW) suites under different names. In countries with aggressive internet filtering (e
Instead of storing decryption keys separately, researchers are experimenting with zero-knowledge proofs that allow a user to prove they have access to a certain layer without revealing which layer. This enables anonymous credentials within the filesystem—e.g., “I have layer 3 access, but don’t tell the server which user I am.” The adversary mounts the outer volume and sees
import requests session = requests.session() session.proxies = 'http': 'socks5h://127.0.0.1:9050', 'https': 'socks5h://127.0.0.1:9050' resp = session.get('http://myfiles.onion/') print(resp.text)
This makes Onion FS a favored architecture for journalists working in oppressive regimes, whistleblowers, and security professionals carrying intellectual property across borders.
: If you have thousands of small files in your overlay, you may notice slightly longer loading screens as the system parses the SD card.