Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

3
votes
2answers
209 views

How does a Tor exit node know the public key of the client?

When the Tor exit node executes the client's request and receives a response from the server, it must create an onion cell that can be reversely decrypted along a circuit through the Tor network. ...
7
votes
1answer
382 views

What Steps Does An Anonymous Artist Need To Take to Retain Anonymity? [closed]

I read these questions which had great information: How can I keep my identity anonymous as a website owner/administrator? and How much can I trust Tor?, however I wonder if this is too extreme for my ...
0
votes
0answers
33 views

How to detect if Tor is being used in the network [duplicate]

I believe Tor is an excellent tool to anonymise the internet usage. However as an admin, how can someone detect if Tor is being used on the network? This becomes crucial in case of institutions like ...
-4
votes
2answers
103 views

Is there any benefit to login to a website as anonymously as possible, if you've already been there from an identifiable IP address?

Here's a basic example of the situation I am in: 1.Friend downloads full-length, new release movie on shady internet site (felony). 2.Uploads it to a randomly created, cloud hosting service account ...
29
votes
4answers
2k views

How does Tor protect against an attacker just running thousands of nodes?

Does Tor have any protection against an adversary simply running a very large number of nodes? Someone with the necessary resources could just run thousands of relay nodes (including exit nodes). If ...
4
votes
2answers
146 views

How do dissidents use Tor?

The most common justification for Tor is that people in countries like China that don't have full protections on free speech can use it to publish dissenting opinions or access foreign information. I ...
1
vote
2answers
244 views

Is chaining multiple VPNs a good way to reach anonymity on the internet?

I would like to chain a couple, say 6 or 7, VPNs together to create a sort of "super" encrypted lane on the internet. I'm not too concerned about speeds, all I want is privacy and anonymity. I've ...
4
votes
3answers
117 views

Does using DNSSEC in parallel with an anonymisation network decrease your privacy?

When using an anonymous communication network like Tor, to ensure privacy you must route your DNS traffic through the system even if your computer always uses DNSSEC for DNS lookups, would this be ...
2
votes
1answer
96 views

Non-profit on limited budgets looking for safety with VPN/TOR etc [closed]

First off, thank you ahead of time for your patience. We are a small non-profit with a 100% volunteer staff. We deal with children and some adults that suffer from Mitochondrial disease. So, I was ...
1
vote
3answers
117 views

Using TOR secure

TOR is fully secure only if I use HTTPS, right? But not every site supports it, so I had an idea - some online anonymizers support HTTPS, so if I connect via TOR (TOR - ANONYMIZER - site), will that ...
0
votes
2answers
67 views

Using the TOR network with a Proxy

I have just implemented a new web-filtering proxy system for my organisation, and I was wondering what the recommendations would be to test the use of TOR through this web-proxy. We are doing SSL ...
0
votes
1answer
50 views

Splitting data between wifi networks for security

Does there exist, software or technology, that can use more than one wifi network, in such a way that only part of the data travels through each 'side'? You would probably need an end address like a ...
1
vote
1answer
29 views

Syverson's paper (Users Get Routed), What do they mean by “common locations”?

I am preparing a survey on Tor and its security. While searching for resources, I have come across with the paper Users Get Routed:Traffic Correlation on Tor by Realistic Adversaries. I comprehend the ...
-3
votes
2answers
2k views

Is it possible to retrieve MAC address of a host using Tor?

I know that Tor is used for anonymity while browsing in the Internet. I heard that by using Tor, it is possible to hide my IP. But is it possible to hide my MAC address also?
0
votes
1answer
243 views

Does Google hand over captcha IPs to webmasters?

Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
28
votes
4answers
24k views

How do you get a specific .onion address for your hidden service?

.onion addresses normally should be made of a base32 string of the first 80 bits of the SHA1 hash of the private key of the server (see .onion address specification). Today I ran into a service which ...
2
votes
3answers
1k views

Using Tor from behind a Proxy (like Burp Suite)

I am interested in exploring a bit of the darknet, and I was wondering about the feasibility of running a Tor exit node from behind a local proxy like Burp Suite so that I could ID the destination ...
3
votes
1answer
113 views

How secure are Tor circuits?

Sometime ago I was talking with a friend about security of different anonimity software kits. The most famous software we talked about was Tor. While I was talking about the triple secret used in ...
12
votes
3answers
320 views

Is there any difference between visiting Facebook via their Tor address, and visiting them via their normal address over Tor?

From a security perspective, is visiting via the .onion address more/less secure? I'm using Facebook as an example, but this question is really about any website which has both a 'normal' and a Tor ...
1
vote
3answers
199 views

Tor IP and cookies in hidden services

So when you connect to tor it gives you a specific IP right, who's IP is this exactly? And when you visit an open website who's IP is visible to the site, mine or the exit node. And while you're ...
2
votes
2answers
101 views

Using anonymous email as official email

Assuming I have created an email in hushmail through of tor, and if I use it as my official email in a site such as Github. Will it throw my anonymity away as I use github from a regular browser?
1
vote
2answers
245 views

Is listening to an audio stream through Tor (using Tails) hazardous?

If someone were to listen to a SHOUTcast server through Tor using VLC (not just downloading the M3U playlist through the Tor browser, of course, but while running Tails), would it put their security ...
3
votes
2answers
164 views

Can First Hop Man in the Middle be Defeated with TOR or VPN?

I was reading this article about a certain in flight WiFi provider issuing fake SSL certificates for Google. This doesn't really surprise me all that much since I'm well aware of the concept of ...
5
votes
2answers
167 views

How does Tor guarantee anonymity of Tor network?

To me it seems that the only thing Tor is doing for anonymity (not security!) is the fact that it does not record the traffic in and out, because obviously if every router was recording the traffic ...
0
votes
0answers
137 views

Is a VPN enough to hide my trafic from my schools IT department? [duplicate]

At my school we log on WiFi with a personal login. If I wanted to hide the traffic from my computer from the network administrators would it be enough for me to use a VPN service like for example ...
1
vote
0answers
21 views

Is it possible to combine VPN and TOR on the same connection? [duplicate]

I'm looking into using a Raspberry Pi 2 between my Router and my Modem acting as an VPN and possibly a TOR gateway (two-in-one). It should just be out-of-the-way and passively/transparently route all ...
12
votes
3answers
3k views

Is the fact that Tor's development is largely government funded cause for concern?

In light of recent events, I've been learning more about Tor, and I have a lot of questions. Here's one. Wikipedia's article states; As of 2012, 80% of the Tor Project's $2M annual budget comes ...
0
votes
1answer
64 views

Security of host computer and network with Tor

I'm considering running a Tor (non-exit) relay on my personal Ubuntu 14.04 computer at home (which also has my personal data on it). I wanted to know if I should have any concerns about the security ...
1
vote
1answer
64 views

TOR node in a box [closed]

Let's say I want to help the TOR network - that relies on volunteers to donate bandwidth - but I am not familiar with Linux nor am I hacker of any kind. Is there a product like TOR node in a a box ...
-1
votes
1answer
722 views

How to detect/block i2p traffic? [closed]

From Wikipedia: The Invisible Internet Project (I2P) is a computer network layer that allows applications to send messages to each other pseudonymously and securely. How can I detect/ block ...
5
votes
1answer
2k views

What are the implications of running a TOR non-exit relay node?

Intuitively, running a non-exit TOR node should bring the benefit of plausible deniability that a packet originated from your device. Unlike exit nodes however, you would not have to worry about ...
3
votes
1answer
222 views

In depth TOR encryption design details

I am currently struggling with understanding the details of a connection in tor, mainly because I try to understand PCTCP. In this paper the authors claim that the changes are local to the onion ...
5
votes
1answer
979 views

Can a malicious Tor exit node perform a HTTPS man-in-the-middle attack to see/modify your HTTPS traffic?

Let's say I am browsing the Internet using Tor - visiting https://example.com/login.php - and the NSA is operating the Tor exit node which I am currently routed to use. Can that NSA exit relay swap ...
2
votes
1answer
141 views

Is an anonymity network like Tor viable on top of the GPG web of trust?

The web of trust is a graph where the vertices are GPG users (actually, their keys) and the edges are cross-signatures. If we put issues of owner trust aside and assume that all participants only sign ...
2
votes
4answers
126 views

Is there a way to make Tor network your full VPN?

Is there a way to use Tor network as your VPN, proxy or something alike? I have been gone to their website but I've seen just browser (Tor Browser), bridge, relay and exit. Is there way to tell ...
8
votes
4answers
26k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
6
votes
2answers
387 views

Tor versus direct monitoring

I know if I use Tor and maybe made a tweet, it gives the government a really tough time tracing the originator. But what if like a police car was directly outside my home for instance. Is it still ...
0
votes
0answers
116 views

What registrars support *.onion TLD as a Subject Alternative Name, and how does validation work?

I'm interested in obtaining a .onion TLD in my SAN name from a public CA. Which Public CAs support .onion TLDs and what is the validation process like (e.g. Whois isn't available for ToR) Update: ...
0
votes
1answer
95 views

Is there any “Internet Kill Switch” feature in TOR Browser Bundle?

At times a VPN drops connection and leaks traffic. Some VPNs have "Internet Kill Switch" to stop traffic automatically when this happens. Does TOR browser bundle also have any such feature by default ...
27
votes
3answers
4k views

Why can a Tor exit node decrypt data, but not the entry node?

Me -> Node A -> Node B -> Node C -> destination The documentation on Tor always states that only the exit node C can see plain text data. How is this possible without me talking to Node C ...
2
votes
1answer
127 views

Is tor really fully decentralized?

I think, somewhere an initial list of the connectable peers had to download. Manipulating this list, or the server providing this list, weren't a serious security compromise of the whole network?
0
votes
1answer
29 views

Possibility of Correlating Certain User Groups in low-latency Networks

Lets first assume some things: There exists an Adversary There exists a known Group of Users of a certain System. The User can communicate to the System through a small set of (to user and ...
-1
votes
1answer
87 views

Blocking Tor By Trying to Connect to an Entry Node [closed]

So, I had an idea on how to block Tor (or similar tools) from being used on your network (or ISP, which is perhaps more relevant, considering Tor's mission). I'm assuming it wouldn't work (based on ...
11
votes
1answer
281 views

Is TLS in Tor useless?

I am trying to optimize the Orchid Tor client library for my needs and noticed that every connection with every node uses TLS with turned off certificate verification. Actually there are no TLS ...
3
votes
2answers
154 views

Tor and remote desktop viewing

If I am using tor for anonimity, does this prevent staff at a place of employment or an educational institution from remotely viewing my desktop and seeing what I am doing on Tor? If so how can I get ...
30
votes
3answers
12k views

How does “check.torproject.org.” know if you're using TOR?

I'm looking at the results from the following URL and would like to know how does the TOR website "know" that TOR is being used or not. ...
12
votes
3answers
5k views

How does the hacker manage to spoof a different IP address?

For the last 2 days, +/- every 15 minutes, someone is attempting to sign-in to my online email account. When I verify recent activity, the IP address (and the corresponding country) is different for ...
1
vote
1answer
1k views

Is there a way to block all TOR traffic incident on my public servers?

I don't want any connections coming from a tor network to be accepted by my servers.
3
votes
4answers
370 views

Does Tor browser work with college network? [closed]

I'm in a system where my modem connects to a college network (KotNet) that monitors its internet traffic. Since I'd like some privacy I was wondering if a Tor browser would hide my identity or if it ...
1
vote
1answer
103 views

is it secure to use proxychains+tor while logged in as root

when using proxychains+tor in kali,you should be logged in as root because proxychanis doesnt work when you are not logged in as root but using tor while logged in as root is not secure so what is ...