Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

3
votes
2answers
119 views

Is it dangerous to have Tor exit node?

If I buy VPS and create Tor exit node there what would happen if someone did bad thing using my exit node? (terrorism, hacking goverment sites etc) VPS provider will share information about me to FBI ...
13
votes
5answers
11k views

Why is Tor safer than a proxy?

If I use a Tor router to browse the regular internet, my traffic must leave the Tor network through an exit node. Apparently the exit node can see the data originally sent. Is this true? If an ...
9
votes
4answers
8k views

How is Tor secure despite being open source?

If Tor is open source (and thus its process of concealing your IP is known), then how does it keep anything secure? Couldn't someone look at the source code and figure out how to reverse the routing ...
2
votes
1answer
100 views

Panopticlick performance for Tor Browser not great. Why?

These are the results for the Panopticlick test on Tor Browser that I just performed: Is your browser blocking tracking ads? Partial protection Is your browser blocking invisible trackers? ...
-1
votes
1answer
84 views
39
votes
5answers
34k views

How do you get a specific .onion address for your hidden service?

.onion addresses normally should be made of a base32 string of the first 80 bits of the SHA1 hash of the private key of the server (see .onion address specification). Today I ran into a service which ...
5
votes
1answer
1k views

How much information can be sniffed at tor exit nodes

When someone is sniffing data at a Tor exit node, how much information can be obtained? The IP can be revealed, but can they see everything you do? Does it make a difference if it is encrypted using ...
1
vote
2answers
63 views

Would it be possible to have a javascript observatory, stricter sandboxing and stricter CSP (Content Security Policy) for Tor?

Would it be possible to have a javascript observatory and stricter CSP (Content Security Policy) and implement it for the Tor Browser? A javascript observatory should work similar to EFF's SSL ...
-2
votes
1answer
60 views

Is Tor Browser vulnerable to WebRTC leak?

If so, which are all the possible solutions to the problem? Are there similar issues to be aware of? Thank you in advance.
3
votes
1answer
69 views

Simulate Tor Circuit

So an interesting thought popped into my head as I was thinking over the Cryptowall malware. If you don't already know, Cryptowall utilizes the Tor service to make the back-end service it uses ...
0
votes
1answer
86 views

If my connection to a website is unencrypted while using Tor is my IP visible? [duplicate]

I suppose to those of you with technical expertise in this matter this question might seem obvious, so apologies as I am know nothing of this topic. Also what data would be possibly visible by someone ...
3
votes
2answers
809 views

Tor exit node can know my IP address?

I have read some articles about how Tor works. I know about layer by layer decryption, but there is something that I cannot understand: If the exit node is the one that does the last decryption and ...
12
votes
4answers
2k views

Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?

(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.) I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
105
votes
4answers
17k views

How would a resourceful government block Tor?

I came across this article saying that after the November 2015 Paris attacks, some French police officers proposed to ban Tor. Tor is used to circumvent censorship! What security techniques would ...
4
votes
3answers
4k views

How Tor, Privoxy, Vidalia and Polipo are getting together?

I realized that these applications are frequently used together. What is the role of each software in the mission of anonymity and privacy on the web? While I understand Vidalia is a GUI provider, I ...
11
votes
2answers
620 views

Why is Tor over HTTPS insecure?

I don't get how a HTTPS connection over Tor can be insecure. Where's the difference between a normal HTTPS connection and a Tor -> HTTP connection? Many sites recommend to use the Onion-URL instead of ...
0
votes
1answer
67 views

TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out? [duplicate]

I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS? Even if it is running on ...
3
votes
1answer
251 views

Youtube.com trying to extract HTML5 canvas data: is Youtube trying to fingerprint users' browser?

While trying to watch a Youtube videos using Tor browser, the Tor browser opens an alert window: This website (www.youtube.com) attempted to extract HTML5 canvas image data, which may be used to ...
1
vote
1answer
156 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
3
votes
2answers
155 views

Is using Chrome and Tor Browser at the same time secure?

I question this recently because as I was using the Tor Browser, while in the same time my Google-Chrome was opened, and I right-clicked on a word to search it in 'Disconect', when the page loaded I ...
3
votes
1answer
78 views

Tor browser further anonymity requirements [duplicate]

Tor and Tor Browser do a good job of providing anonymity, but we cannot rely on them alone. The development of newer techniques for identifying web users (such as canvas fingerprinting) mean that ...
6
votes
3answers
994 views

Is the connection to Tor hidden services encrypted?

It's possible for Tor exit nodes to sniff traffic on normal websites, unless you connect via SSL/HTTPS. But what about hidden services, they don't seem to support the HTTPS protocol. Can the exit ...
0
votes
1answer
65 views

What information can Adobe Reader and MS Word send over the internet when a document is opened? [duplicate]

I was reading the warnings with Tor and was curious about this one inparticular: Don't open documents downloaded through Tor while online The Tor Browser will warn you before automatically ...
1
vote
1answer
79 views

How to establish VPN connection through Tor? [closed]

How do I connect to a VPN network via Tor? Is it more anonymous than the other way around (VPN-->Tor)?
1
vote
1answer
44 views

How can I put in relation http timestamp with country time zone of the IP?

I have a series of packets within a PCAP files, among them I'm getting packet with HTTP protocol. starting from IP address I get the timestamp in GMT format and the time zone, for example: Source IP:...
35
votes
8answers
12k views

If I visit a HTTPS website when using Tor, is my IP exposed?

HTTPS is an end-to-end encrypted connection. Given this, does the website I am visiting know my original IP? The website is only available over HTTPS (not unencrypted HTTP).
0
votes
1answer
134 views

Can anyone access my computer if I use tor browser?

Today I was told that if I use tor browser, hackers may access my Computer and can delete or copy files from my Hard Drive. Is it really true? Can hackers access my computer If I use tor? Thanks ...
56
votes
5answers
9k views

How can you be tracked using screen resolution/monitor size in Tor?

Whenever I maximize the Tor browser, it shows a warning: Maximizing Tor Browser can allow websites to determine you monitor size, which can be used to track you... How can screen resolution or ...
3
votes
3answers
1k views

Is it safe to access http sites from Tor?

Somewhere I read that you should only open HTTPS links on Tor because otherwise your ISP for example could read the webpages you visit. I searched on the subject and somewhere else I read that the ...
1
vote
2answers
332 views

Is Tor secure if exit node is compromised?

Ok, so let's say exit node has been compromised, or it is run by NSA or whatever. Can they still track you? They obviously can see the last IP address of the server, but what about the one server ...
10
votes
2answers
6k views

How safe is Tor from MITM/snooping attacks?

I am behind an HTTP proxy, and I frequently tunnel out via an ssh -D SOCKS proxy (I have access to a couple of outside servers which I can tunnel to) when the HTTP proxy causes problems1. Now, this ...
0
votes
3answers
364 views

How is Tails operating system tested to make sure its authenticity

It's said that tails is the most secure OS ever, but has anyone tested it? i.e How is it known that tails does not do operations such as: sniffing on your own network and sending your data to a 3rd ...
5
votes
2answers
2k views

Is using VPN, Tor and ProxyChains together more secure?

Similar question (Tor and VPN only). All these three technologies seem to share the same goal, i.e. making internet traffic anonymous. Does it make any sense to try to use them together to increase ...
3
votes
1answer
689 views

Encryption key exchange for Tor

I've been studying how Tor works - including the great QA "Why can a Tor exit node decrypt data, but not the entry node?". I understand the concept of onion routing and multiple layers of encryption....
6
votes
1answer
13k views

Bypassing a captive portal with tor

I know that NSXTS and Iodine can be used to bypass a captive portal by taking advantage of permissive DNS firewall rules. What I have found recently is that simply by using Tor, I can also bypass a ...
5
votes
4answers
180 views

MITM attack between me and TOR entry node

In which ways can my ISP, who by the way controls the WiFi router I connect to, do a MITM attack on my TOR connections and hence read the traffic?
2
votes
1answer
248 views

How to forward HTTP/SOCKS proxy on same port to SOCKS server?

I have socks server (TOR) and can "convert" it into HTTP/HTTPS one via Polipo or something like this. But I want to use it transparently as HTTP or SOCKS on the same port. I have experience with ...
4
votes
2answers
104 views

Is it possible to retrieve data from a intermediate node in Tor browser

I'm using Tor browser for my internet surfing and check my email, my questions are Is my internet services provider able to see the websites I visited Is it possible to retrieve a login information ...
2
votes
2answers
452 views

How to recognize TOR traffic

Having a PCAP file with TOR traffic, is there a way fast enough to recognize if any of the packets are part of TOR traffic/sessions? Some tools speak about "protocol identification via statistical ...
5
votes
1answer
3k views

Is there a way to block all TOR traffic incident on my public servers?

I don't want any connections coming from a tor network to be accepted by my servers.
6
votes
4answers
726 views

What are the most effective ways to stay anonymous in the internet? [duplicate]

I wonder how hackers can stay anonymous in the Internet. I have some ideas like using TOR or a chain of servers (for example a few SSH tunnels through different countries) but which of them are common?...
3
votes
2answers
446 views

How to increase anonymity of TOR

I need some system to gain a high level anonymity - nobody should have the possibility to figure out my IP. I can use TOR, but I do not completely trust to it. So I have an idea for a system with high ...
7
votes
4answers
259 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
5
votes
2answers
664 views

download file/folder anonymously on a ssh session

I rent a paid VPS hosted online and want to transform it to a sort of treasure chest where I can upload and download files privately. For this purpose I want to do this operation over the Tor network. ...
-2
votes
1answer
99 views

Why are discovered vulnerabilities of suspicious/illegal online software published? [closed]

For example, the Tor network has recently been hit by a reveal of a major exploit in a research paper. Isn’t publishing the details on the exploits completely counter-productive as the developers of ...
9
votes
3answers
27k views

Downloading files using Tor

I have the Tor Browser Bundle installed and have been using the Firefox Tor browser. If I attempt to download a file or email attachment I get the following warning I understand that if I download ...
2
votes
2answers
351 views

Why do tor nodes maintain TLS keys with all other Tor nodes?

I read that Tor proxy maintains a session key with tor nodes and uses it while encrypting data but why do Tor nodes maintain keys with other tor nodes?
1
vote
1answer
307 views

Using Tor browser to use YouTube and account security

YouTube is not available in my country, but I want to make an account on YouTube and use it. I'm not interested in protecting my identity. It is fine if anyone can monitor it. The thing I'm interested ...
0
votes
4answers
173 views

Is 100% anonymity possible with Tor under certain circumstances? [duplicate]

Tor has guidelines that define a set of rules/techniques to assure anonymity. Some examples are browsing in small window mode so your screen resolution can't be detected, using HTTPS everywhere, and ...
-1
votes
1answer
422 views

Twitter phone verification while on Tor [closed]

Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number. I've had the account for years but they've decided now there's "suspicious ...