Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

1
vote
1answer
79 views

How to establish VPN connection through Tor? [closed]

How do I connect to a VPN network via Tor? Is it more anonymous than the other way around (VPN-->Tor)?
1
vote
1answer
44 views

How can I put in relation http timestamp with country time zone of the IP?

I have a series of packets within a PCAP files, among them I'm getting packet with HTTP protocol. starting from IP address I get the timestamp in GMT format and the time zone, for example: Source IP:...
0
votes
1answer
134 views

Can anyone access my computer if I use tor browser?

Today I was told that if I use tor browser, hackers may access my Computer and can delete or copy files from my Hard Drive. Is it really true? Can hackers access my computer If I use tor? Thanks ...
3
votes
3answers
1k views

Is it safe to access http sites from Tor?

Somewhere I read that you should only open HTTPS links on Tor because otherwise your ISP for example could read the webpages you visit. I searched on the subject and somewhere else I read that the ...
1
vote
2answers
322 views

Is Tor secure if exit node is compromised?

Ok, so let's say exit node has been compromised, or it is run by NSA or whatever. Can they still track you? They obviously can see the last IP address of the server, but what about the one server ...
5
votes
2answers
2k views

Is using VPN, Tor and ProxyChains together more secure?

Similar question (Tor and VPN only). All these three technologies seem to share the same goal, i.e. making internet traffic anonymous. Does it make any sense to try to use them together to increase ...
0
votes
3answers
363 views

How is Tails operating system tested to make sure its authenticity

It's said that tails is the most secure OS ever, but has anyone tested it? i.e How is it known that tails does not do operations such as: sniffing on your own network and sending your data to a 3rd ...
2
votes
1answer
244 views

How to forward HTTP/SOCKS proxy on same port to SOCKS server?

I have socks server (TOR) and can "convert" it into HTTP/HTTPS one via Polipo or something like this. But I want to use it transparently as HTTP or SOCKS on the same port. I have experience with ...
4
votes
2answers
104 views

Is it possible to retrieve data from a intermediate node in Tor browser

I'm using Tor browser for my internet surfing and check my email, my questions are Is my internet services provider able to see the websites I visited Is it possible to retrieve a login information ...
56
votes
5answers
9k views

How can you be tracked using screen resolution/monitor size in Tor?

Whenever I maximize the Tor browser, it shows a warning: Maximizing Tor Browser can allow websites to determine you monitor size, which can be used to track you... How can screen resolution or ...
4
votes
5answers
598 views

Is using Tor and VPN combination more secure?

I have been reading more about Tor and its risks to personal data leakage to the exit nodes in the chain. This last node can snatch encryption keys or log in information of websites I may have ...
2
votes
2answers
449 views

How to recognize TOR traffic

Having a PCAP file with TOR traffic, is there a way fast enough to recognize if any of the packets are part of TOR traffic/sessions? Some tools speak about "protocol identification via statistical ...
6
votes
4answers
726 views

What are the most effective ways to stay anonymous in the internet? [duplicate]

I wonder how hackers can stay anonymous in the Internet. I have some ideas like using TOR or a chain of servers (for example a few SSH tunnels through different countries) but which of them are common?...
1
vote
2answers
63 views

Would it be possible to have a javascript observatory, stricter sandboxing and stricter CSP (Content Security Policy) for Tor?

Would it be possible to have a javascript observatory and stricter CSP (Content Security Policy) and implement it for the Tor Browser? A javascript observatory should work similar to EFF's SSL ...
5
votes
2answers
664 views

download file/folder anonymously on a ssh session

I rent a paid VPS hosted online and want to transform it to a sort of treasure chest where I can upload and download files privately. For this purpose I want to do this operation over the Tor network. ...
11
votes
2answers
614 views

Why is Tor over HTTPS insecure?

I don't get how a HTTPS connection over Tor can be insecure. Where's the difference between a normal HTTPS connection and a Tor -> HTTP connection? Many sites recommend to use the Onion-URL instead of ...
-2
votes
1answer
99 views

Why are discovered vulnerabilities of suspicious/illegal online software published? [closed]

For example, the Tor network has recently been hit by a reveal of a major exploit in a research paper. Isn’t publishing the details on the exploits completely counter-productive as the developers of ...
0
votes
4answers
173 views

Is 100% anonymity possible with Tor under certain circumstances? [duplicate]

Tor has guidelines that define a set of rules/techniques to assure anonymity. Some examples are browsing in small window mode so your screen resolution can't be detected, using HTTPS everywhere, and ...
-1
votes
1answer
419 views

Twitter phone verification while on Tor [closed]

Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number. I've had the account for years but they've decided now there's "suspicious ...
3
votes
2answers
441 views

How to increase anonymity of TOR

I need some system to gain a high level anonymity - nobody should have the possibility to figure out my IP. I can use TOR, but I do not completely trust to it. So I have an idea for a system with high ...
1
vote
1answer
3k views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to http://...
1
vote
1answer
103 views

DynDNS alongside Tor? [closed]

Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer behind a NAT even if I am in a country that consider supicious connections to my native country ?
1
vote
2answers
67 views

Could my DNS requests get manipulated while using tor?

I just downloaded Tor Browser Bundle and extracted it. I had no copy of my Tor Nodes Settings so i just browsed using the standard nodes and i forgot to disabke Java Script. I did not notice ...
5
votes
2answers
439 views

Questions on true anonymity

I am going to use Tails to connect to Tor through VPN which has AES-256 data encryption, SHA-256 data authentication and RSA-4096 handshake encryption on my Mac on my school's WiFi (as public as I can ...
5
votes
1answer
96 views

VirtualBox: Ubuntu With or Without Virtual Hard Drive

I've been working on a setup using VirtualBox that uses the Whonix Gateway as a Tor middlebox and I am planning on using Ubuntu for the workstation. I don't plan on storing any information on the ...
4
votes
3answers
323 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
8
votes
4answers
5k views

Why disable JavaScript in Tor? [duplicate]

Why it is not advisable to use JavaScript with Tor? Yet with JavaScript, you cannot get the IP address of the user except through an external website. How could using JavaScript with Tor expose one's ...
2
votes
0answers
59 views

Can high network usage be detected and prevented in Tor? [closed]

I've already asked this question here but as of yet it has no views/answers. I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using ...
1
vote
1answer
66 views

Going to host a “hidden service”, should I “wipe” or edit file metadata?

I have made a site that is a hidden service on the Tor network. I was wondering if there any security risks by leaving metadata untouched for various files including but not limited to stylesheets (...
6
votes
2answers
374 views

TOR: same exact entry node since a week ago

Since a few days ago, my copy of TOR (4.5.3) keeps using exactly the same entry node every single time I use it. I am pretty sure that that's not how it used to be in the past. I feel a bit ...
1
vote
2answers
126 views

Could anyone technically see my requests with TOR if the person has access to my router?

I was wondering if someone could sniff the packets I send via my computer with something like Wireshark I guess even if I use TOR and the person could access the router like stated.
5
votes
4answers
179 views

MITM attack between me and TOR entry node

In which ways can my ISP, who by the way controls the WiFi router I connect to, do a MITM attack on my TOR connections and hence read the traffic?
1
vote
1answer
307 views

Using Tor browser to use YouTube and account security

YouTube is not available in my country, but I want to make an account on YouTube and use it. I'm not interested in protecting my identity. It is fine if anyone can monitor it. The thing I'm interested ...
-1
votes
1answer
131 views

Tor website HPKP (key pinning) failure

I'm currently facing a key pinning error when trying to access the torproject.org website with Firefox. Is anyone facing the same problem? Does anyone know if they changed their certificate? If not, ...
4
votes
1answer
444 views

Decrypting TOR traffic?

Is there any way to decrypt tor traffic from an exit node or relay? I know it's possible to analyze the traffic using something like tcpflow or tcpdump, but it comes back as encrypted giberish. Is ...
1
vote
2answers
163 views

Online anonymity for a journalist in a dangerous country [closed]

I am a journalist in a corrupt country. I am concerned that my online usage will allow my antagonists to track me down, and it wouldn't end very good. I am aware that I may use TOR and VPNs, and ...
0
votes
0answers
107 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...
4
votes
1answer
85 views

TOR makes multiple connections - why?

When using TOR, I issued this in terminal sudo netstat -punta | grep 443. Output was tcp 0 0 x.x.x.x:y a.a.a.a:443 ESTABLISHED 5769/tor tcp 0 0 x.x.x.x:y b.b....
1
vote
0answers
64 views

Whonix Signature verification failure

I've downloaded Whonix images and I have successfully imported the signing key (https://www.whonix.org/wiki/Whonix_Signing_Key). I have also established trust for the said key and verified that by ...
3
votes
4answers
427 views

In a monitored network, can the admins tell if Tor is being used?

I'm not asking if Tor is secure, I'm asking if an observer can know you are using Tor? For example if a persons ISP or company network monitors traffic would they be able to determine with certainty ...
1
vote
1answer
191 views

What is the best setup to keep my email private from both attackers and government agencies?

I am attempting to setup a secure and private email account for my company. we currently use gmail which actually requests the emails from a hosting service provider that is configured with our ...
1
vote
0answers
492 views

Setting the exit node of a tor relay by country [closed]

I'm having some trouble in setting the country of the tor exit nodes. Following this link, by adding the bellow entries to the ./Data/torrc ExitNodes {ru} StrictNodes 1 an exit node from the ...
1
vote
1answer
198 views

Are darknets in the internet like Tor and i2p similar to darknets implemented for security like the CAIDA network telescope.?

I am planning to implement a darknet in an organizational network to work alongside SNORT to detect malicious scanning activities in the network like the CAIDA network telescope/Internet Motion Sensor....
-4
votes
2answers
145 views

Is there any benefit to login to a website as anonymously as possible, if you've already been there from an identifiable IP address?

Here's a basic example of the situation I am in: 1.Friend downloads full-length, new release movie on shady internet site (felony). 2.Uploads it to a randomly created, cloud hosting service account (...
7
votes
4answers
259 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
3
votes
2answers
696 views

How does a Tor exit node know the public key of the client?

When the Tor exit node executes the client's request and receives a response from the server, it must create an onion cell that can be reversely decrypted along a circuit through the Tor network. Thus,...
4
votes
2answers
272 views

How do dissidents use Tor?

The most common justification for Tor is that people in countries like China that don't have full protections on free speech can use it to publish dissenting opinions or access foreign information. I ...
3
votes
2answers
2k views

Is chaining multiple VPNs a good way to reach anonymity on the internet?

I would like to chain a couple, say 6 or 7, VPNs together to create a sort of "super" encrypted lane on the internet. I'm not too concerned about speeds, all I want is privacy and anonymity. I've ...
2
votes
1answer
123 views

Non-profit on limited budgets looking for safety with VPN/TOR etc [closed]

First off, thank you ahead of time for your patience. We are a small non-profit with a 100% volunteer staff. We deal with children and some adults that suffer from Mitochondrial disease. So, I was ...
3
votes
3answers
136 views

Does using DNSSEC in parallel with an anonymisation network decrease your privacy?

When using an anonymous communication network like Tor, to ensure privacy you must route your DNS traffic through the system even if your computer always uses DNSSEC for DNS lookups, would this be ...