Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

8
votes
4answers
23k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
5
votes
2answers
380 views

Tor versus direct monitoring

I know if I use Tor and maybe made a tweet, it gives the government a really tough time tracing the originator. But what if like a police car was directly outside my home for instance. Is it still ...
0
votes
0answers
90 views

What registrars support *.onion TLD as a Subject Alternative Name, and how does validation work?

I'm interested in obtaining a .onion TLD in my SAN name from a public CA. Which Public CAs support .onion TLDs and what is the validation process like (e.g. Whois isn't available for ToR) Update: ...
0
votes
1answer
73 views

Is there any “Internet Kill Switch” feature in TOR Browser Bundle?

At times a VPN drops connection and leaks traffic. Some VPNs have "Internet Kill Switch" to stop traffic automatically when this happens. Does TOR browser bundle also have any such feature by default ...
27
votes
3answers
4k views

Why can a Tor exit node decrypt data, but not the entry node?

Me -> Node A -> Node B -> Node C -> destination The documentation on Tor always states that only the exit node C can see plain text data. How is this possible without me talking to Node C ...
3
votes
1answer
112 views

Is tor really fully decentralized?

I think, somewhere an initial list of the connectable peers had to download. Manipulating this list, or the server providing this list, weren't a serious security compromise of the whole network?
5
votes
1answer
166 views

About onion packet and onion routing?

I was just wondering if anyone has a diagram showing what is encrypted inside an onion packet when it leaves the sender? When a Tor client sends the packet out, wouldn't the entry onion node know ...
0
votes
1answer
29 views

Possibility of Correlating Certain User Groups in low-latency Networks

Lets first assume some things: There exists an Adversary There exists a known Group of Users of a certain System. The User can communicate to the System through a small set of (to user and ...
-1
votes
1answer
71 views

Blocking Tor By Trying to Connect to an Entry Node [closed]

So, I had an idea on how to block Tor (or similar tools) from being used on your network (or ISP, which is perhaps more relevant, considering Tor's mission). I'm assuming it wouldn't work (based on ...
11
votes
1answer
230 views

Is TLS in Tor useless?

I am trying to optimize the Orchid Tor client library for my needs and noticed that every connection with every node uses TLS with turned off certificate verification. Actually there are no TLS ...
3
votes
2answers
100 views

Tor and remote desktop viewing

If I am using tor for anonimity, does this prevent staff at a place of employment or an educational institution from remotely viewing my desktop and seeing what I am doing on Tor? If so how can I get ...
31
votes
3answers
11k views

How does “check.torproject.org.” know if you're using TOR?

I'm looking at the results from the following URL and would like to know how does the TOR website "know" that TOR is being used or not. ...
12
votes
3answers
4k views

How does the hacker manage to spoof a different IP address?

For the last 2 days, +/- every 15 minutes, someone is attempting to sign-in to my online email account. When I verify recent activity, the IP address (and the corresponding country) is different for ...
1
vote
1answer
552 views

Is there a way to block all TOR traffic incident on my public servers?

I don't want any connections coming from a tor network to be accepted by my servers.
3
votes
4answers
248 views

Does Tor browser work with college network? [closed]

I'm in a system where my modem connects to a college network (KotNet) that monitors its internet traffic. Since I'd like some privacy I was wondering if a Tor browser would hide my identity or if it ...
0
votes
1answer
78 views

is it secure to use proxychains+tor while logged in as root

when using proxychains+tor in kali,you should be logged in as root because proxychanis doesnt work when you are not logged in as root but using tor while logged in as root is not secure so what is ...
0
votes
2answers
819 views

connecting a secure computer directly to the internet without a router

If you have a fairly secure computer how dangerous is it to connect to a modem directly without a router in between. Let's say the computer is running Debian as a host and Whonix in VirtualBox, a VPN ...
-2
votes
1answer
235 views

how to use tor in linux kali with other applications

I want to know how to open applications as nmap and recon-ng through tor first I have kali linux v 1.0.9 and tor I tried using proxychains recon-ng but all I get is that the normal banner of ...
4
votes
1answer
131 views

How is a Tor hidden service authenticated based only on trusting the address?

While being fascinated by how it is possible to create hidden services with Tor, there's a few details around the address collision issue I can't seem to wrap my head around. Quote from Hidden ...
0
votes
0answers
39 views

Could someone compare basic anonymity vs basic computer hacker anonymity? [duplicate]

So, let's say one just doesn't want the government/corporations to know what they are doing online. Let's say, for example, that they just don't trust the NSA, FBI, Google, etc. So what are the steps ...
0
votes
1answer
96 views

Do you really have to go to the extremes this guide says? [duplicate]

http://lifehacker.com/how-can-i-stay-anonymous-with-tor-1498876762 Alright, so here's a lifehacker guide on how to remain anonymous. Do you really have to go to this high level of extreme to remain ...
-3
votes
1answer
158 views

How can Tor be considered a standard tool for achieving anonimity, given that it is created by the government? [duplicate]

Tor network is considered to be a main tool for achieving network anonymity. But it is of common knowledge, that Tor was created by programmers in US Navy. Yet the main "spy" on the net is considered ...
3
votes
3answers
193 views

How to get net anonymity while browsing?

I am a college student and am getting free wifi for using the 'Hostel campus" facility ', to access net, I have to put a proxy IP address to my browser. I have heard that they can see what all ...
4
votes
1answer
188 views

Using Facebook via Tor

I think about using Tor for nearly everthing, including Facebook, because FB often tags the users even on other sites, for example per Like-Button, Cookies etc. Now I think about using the Tor ...
0
votes
2answers
102 views

How can I be as anonymous as possible while on Tor? [duplicate]

I've started browsing the deep web recently and have seen a lot of illegal content. Now while I have no interest in any of the illegal content, I don't want to be caught on one of these sights because ...
0
votes
4answers
548 views

Anonymity through Tor over VPN [closed]

I want to do some research on network anonymity. Assume that I am careful enough not to disclose any personal information while connected to an anonymous network. If I run a system that uses TOR ...
1
vote
2answers
181 views

I'm wondering how I hide my identity online well [duplicate]

what are the different ways to become anonymous. Is quicksilver a good email for that? What are the different options? I know about proxies, Tor, and VPNs. Should I do all three? I like computers but ...
1
vote
0answers
109 views

Hidden TrueCrypt Container containing the Tor Browser Bundle

I'm considering using a hidden TrueCrypt container to keep a Tor browser bundle copy which could save bookmarks. In this case, would the TBB leave traces on the OS it started with? E.g. I use my ...
7
votes
1answer
614 views

How are Tor packets decrypted on the client?

I am a bit confused about packet decryption of Tor on the client. I understand that if a client sends a request to a web server by using Tor, the request will be encrypted a couple of times, and ...
1
vote
1answer
2k views

What are the risks of using Tor browser? [duplicate]

Are there any risks to using Tor browser? Does it make you more prone to being hacked, since a majority of hacker community is using Tor?
8
votes
2answers
202 views

Why does Tor use a new route every few minutes

As far as I know, Tor selects three new nodes every few minutes. What is the advantage of this? The only thing I came up with was to prevent "Bad exit nodes" from viewing too much of your (hopefully ...
4
votes
1answer
65 views

Design differences of tails and whonix concerning virtualization

Tails and Whonix both can run in VirtualBox. Tails doesn't recommends it for security reasons (https://tails.boum.org/doc/advanced_topics/virtualization/index.en.html), for Whonix it seems to be a ...
2
votes
2answers
284 views

Can Tor nodes infect my computer with malware?

Can I get "hacked" by a Tor node? My computer is sending packets through the Tor nodes and receiving packets from them as well. Can I be sure that there are no Tor nodes that manipulate the packets ...
1
vote
1answer
98 views

Is this a secure way to connect with Tor?

I was discussing the use of tor with a friend, and he happened to suggest a way to remain secure when using applications on the terminal (Lynx, Nmap etc.) His suggestion was this: ssh-keygen -b 4096 ...
21
votes
2answers
5k views

In the SilkRoad takedown, what does it mean “An IP address was leaking” in Tor?

According to the official complaint, on Page 28 they mention: on May 24, 2013, a Silk Road user sent him a private message warning him that "some sort of external IP address" was "leaking" from ...
0
votes
3answers
113 views

TOR security if ISP blocks TLS channel?

If ISP blocks TLS channel while a user is using TOR, can he read the TOR traffic, since TOR uses TLS encryption ?
2
votes
2answers
323 views

How are packets received by a Tor exit node routed back through the Tor circuit?

What happens to the packets that the exit node sends/receives from the desired web server? Does each response packet get routed back through the Tor circuit (encrypting on the way) individually? If ...
-1
votes
1answer
223 views

Anonymity with TOR in wifi connection (student house)

I just moved in a student flat where several students are using the same wifi connection. A few days ago the internet was very slow and a guy (son of the owner) came in to ask if I was downloading. He ...
11
votes
2answers
2k views

How does Tor protect against fake entry nodes / total redirection?

There is much material on how to protect yourself from malicous exit nodes, especially by using SSL and minimizing the leakage of identifying information (user-agent, screen size, etc.). However, I ...
1
vote
1answer
108 views

Is running a TOR node from device in home network secure?

I want to run a TOR node using a small ARM device mini server. I already have a good firewall set but feel a bit uncomfortable when giving away my IP address to the open web by opening a port. If I ...
0
votes
1answer
160 views

Is there a way of determining if tor is running on a remote machine?

In most of the companies, IT guys block some sites and by using TOR or other VPNs people walk around these blocks and gain access to blocked content. My question is, assuming TOR is running on ...
0
votes
4answers
673 views

How can i protect myself from tor vulnerability on windows

Recently I came across an article regarding Tor. According to article there is speculation that the uncovered malware was used by a law enforcement agency to harvest the IP addresses of users ...
2
votes
3answers
481 views

Is there an anti-proxy detection available?

Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they ...
20
votes
3answers
7k views

Can my workplace view my Tor traffic? [duplicate]

I connect to the internet using my company's Wi-Fi and Tor. Can they still see the websites I visit?
1
vote
0answers
78 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
4
votes
2answers
288 views

What is the ideal anonymous workstation setup? [closed]

My goal is to build a perfect stationary workstation from which I can work anonymously. Most instructions on being anonymous usually involve, at some point, moving around and switching from coffee ...
1
vote
0answers
138 views

What is known about recent zero day flaw with Tails up to this point in time and is Tails able to keep us anonymous from a global adversary? [closed]

Following is a excerpt from COMPUTERWORLD Yesterday, in talking about the zero-day vulnerability in Tails, Exodus Intelligence wrote: "We publicized the fact that we’ve discovered these ...
1
vote
1answer
512 views

“VPN -> Tor: Go to jail” - What's the logic behind this?

The VPN won't see anymore than your ISP already is. So even if the VPN was logging everything you did, shouldn't it just leave you in status quo? How can it ever compromise your identity, that you ...
6
votes
1answer
217 views

TOR: I'm repeatedly being connected to a couple of Entry Nodes!

I'm using TOR (Orbot for Android), and when I look at the log of the connection establishment phase, I see that I'm repeatedly being connected to familiar nodes, especially the Entry Nodes which 3 out ...
2
votes
2answers
286 views

Can ISP use MITM attack to “break” encrypted traffic?

Use connection of A and B as an example. Their communications were encrypted by Public Key Encryption. Before they exchange their public key, ISP MITM attacked. A got "B"'s public key (ISP generated) ...