Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

If I'm not mistaken, TOR works opening a random anonymous path between two hosts using others computers that have TOR installed no?

Then... everybody can sniff the data of the others no? Just wait with the sniffer enabled and wait that TOR choose you as a node of someone's connection.

What others alternatives exist for hide a connection? No proxy.

share|improve this question
The only way of truly hiding communication, is by establishing an encrypted connection with the target/receiver. Any form of encryption using middle people, will only protect the message to a certain point, but the final unencrypted transmission to the server, will always be at risk. –  Waleed Hamra Nov 26 '12 at 14:31
Technically TOR nodes are proxy servers. –  ewanm89 Nov 26 '12 at 14:38
The design behind tor is that nobody but the originator has both the source of the communication and the destination of the communication. Everyone else either neither (most common) or one or the other. Exit nodes can sniff traffic, though. Presumably anything sensitive is going to be encrypted. –  broadway Nov 26 '12 at 22:16
An alternative to tor is i2p which uses a different architecture and is arguably 'more anonymous'. –  user5065 Nov 27 '12 at 20:27

3 Answers 3

up vote 6 down vote accepted

Not really,

The only who can sniff data is the last node between the three. And even then, it can't tell who this data belongs to unless this data contains identifying information.

The reason the others can't sniff is that TOR uses onion routing, as its name suggests. That is, when you send a request to a certain server, and suppose it's going to pass through nodes A, B and C, the message is first encrypted using C's public key, this encrypted message is encrypted with B's key, and this double encrypted message is further encrypted using A's key, then transmitted to A, and as each node receives it, it unlocks its own layer of encryption, and passing it along, without being able to know what's further inside.

share|improve this answer
Question. If someone was able to own all of the endnodes then Tor would be completely broken...Am I correct? –  Rell3oT Nov 26 '12 at 15:39
yup, that would be quite a dangerous person. But then, you have around 3K nodes (current reading)... so what are the odds? –  Waleed Hamra Nov 26 '12 at 15:46
what could be dangerous as well, is a large group of TOR node owners agreeing with each other to use a modified TOR client that will communicate with other modified clients in order to decrypt connections, given a user attempts a connection with 3 such nodes. The main risk here, the TOR network will not be able to identify these rogue nodes, given the open source nature of the client. –  Waleed Hamra Nov 26 '12 at 15:49
I don't think it would be that difficult. With the ease of scalability today someone or some entity could easily flood the market with 10000 or more of their own... –  Rell3oT Nov 26 '12 at 15:54

I understand that I am late to the party, but still I would like to add my few words:

Quick answers:

TOR works opening a random anonymous path between two hosts using others computers that have TOR installed

No. Have installed TOR, are using TOR and agreed that they will be nodes. (They can also chose what type of nodes they will be)

everybody can sniff the data of the others

No. Only the last (exit-node) can sniff your data

What others alternatives exist for hide a connection?

This is really good to hide connection. You have a free high quality proxy which does not know about your location. But it does not provide security. Use websites which has https

A little bit of explanation how TOR works:

Tor is anonymizer. This means that it's primary function is to hide information about your internet activity (so if your network provider wants to see what exactly are you browsing, or a website wants to track who exactly visited it - both of them will fail)

The best explanation about the principles of work of TOR are depicted in the pictures: enter image description here

Here you see that to connect to the TOR network you in the beginning need to know to whom to connect. You get this info from TOR server. These are not people, who are just using TOR, but rather people who decide to contribute to the TOR network. (In the options in your client, you can choose to be a contributor. On this laptop do not have tor, so can not point right now where exactly it is). This connection is encrypted. After you have chosen a node, you connects to it directly (also using encryption).

enter image description here Than the connection bounced for several times and each time it is encrypted. The only node, who will know about your query is actually the last one, who decrypts it to connect to the server you wanted in the first place. But he do not know who asked for this connection. The server replies to that node with unencrypted data. So he also see the info intended for you. (One more time - he does not know who are you). He encrypts it end sends back through the same path. You encrypt the data, you asked for. Because of this path, it actually takes so long to open a web page using TOR.

Pictures are taken from official TOR web-site.

So actually you get the same problems as if you are using a proxy server. It is possible for the exit node (only for him, not for every node in the path) to sniff your traffic. This means he can:

  • know which web pages the user visits
  • read the messages the user exchanges through unencrypted IM networks
  • read the emails the user sends
  • find passwords and login for FTP, SMTP, web services
  • use cookie hijacking to impersonate you

But if you will be going to SSL protected website, he will not be able to do the above mentioned. So connect through TOR for anonimity and be sure that you connected to https for security.

share|improve this answer

The point of TOR is not necessarily to protect the data being transmitted, but rather to annonymize the originator of the data. It has been a while since I looked at TOR so others may be able to provide more detailed information, but I believe there is an option to encrypt information as it is sent across TOR as well such that only the packet envelopes are decrypted by the routing nodes.

That said, you are correct that rogue nodes are probably the primary threat to TOR as they can report their routing information, however since routing nodes are chosen randomly, it offers minimal insight in to who actually originated data as they may have simply been passing on a request from another TOR user. Also, since the routing is random, it is unlikely that sufficient information would be recovered to determine the entire connection.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.