Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

3
votes
3answers
523 views

Attack on Tor with stolen private keys of main nodes

What could attacker do with stolen private keys of main nodes? Tor is based on 10 main nodes: moria1, tor26, dizum, Tonga, etc. IP Addresses of this nodes hard-coded into client. ./src/or/config.c: ...
3
votes
1answer
398 views

anonymization for scanning and hacking

What kind of anonymization can be used for scanning and exploiting? Of course there are VPNs and VPS, but thats a different story. I know some scanning can be done via TOR, but how can an exploit or ...
3
votes
2answers
327 views

Tor traffic correlation attacks by global adversaries

I recently came across a paper called "Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries" (Aaron Johnson et al) ... which seems to be saying that adversaries (like the NSA) that ...
3
votes
2answers
996 views

How to run a Tor exit node securely on a vps

I want to run a TOR exit node on a vps, what security measures do I have to put in place on the vps? I know it will be a huge target for hackers and the three letter word agencies in the USA so I need ...
3
votes
1answer
35 views

Design differences of tails and whonix concerning virtualization

Tails and Whonix both can run in VirtualBox. Tails doesn't recommends it for security reasons (https://tails.boum.org/doc/advanced_topics/virtualization/index.en.html), for Whonix it seems to be a ...
3
votes
1answer
244 views

How much information can be sniffed at tor exit nodes

When someone is sniffing data at a Tor exit node, how much information can be obtained? The IP can be revealed, but can they see everything you do? Does it make a difference if it is encrypted using ...
3
votes
1answer
450 views

How is a Tor hidden service immune to exit node attacks?

Let me explain with a nifty diagram: IP/RP <-> bunch of Tor clients/node (Tor circuit) <-> Tor hidden service Wouldn't the last Tor client in the circuit knows that the message is for the Tor ...
3
votes
3answers
372 views

Are there any same origin issues (SOP) with TOR?

Are there any issues with Same Origin Policy (SOP) with TOR or *.onion addresses? I'm thinking of cookies Plugins (Silverlight, Flash, Java, etc) Javascript
3
votes
1answer
100 views

How is a Tor hidden service authenticated based only on trusting the address?

While being fascinated by how it is possible to create hidden services with Tor, there's a few details around the address collision issue I can't seem to wrap my head around. Quote from Hidden ...
3
votes
1answer
143 views

Using Facebook via Tor

I think about using Tor for nearly everthing, including Facebook, because FB often tags the users even on other sites, for example per Like-Button, Cookies etc. Now I think about using the Tor ...
3
votes
3answers
169 views

How to get net anonymity while browsing?

I am a college student and am getting free wifi for using the 'Hostel campus" facility ', to access net, I have to put a proxy IP address to my browser. I have heard that they can see what all ...
3
votes
1answer
269 views

Encryption key exchange for Tor

I've been studying how Tor works - including the great QA "Why can a Tor exit node decrypt data, but not the entry node?". I understand the concept of onion routing and multiple layers of ...
2
votes
1answer
198 views

Torception: An onion within an onion

With the recent takedown of silkroad, I am pondering on how anonymous you actually can be on the Tor Network. Other more legal or moral uses such as anonymity as a right, or avoiding censorship. These ...
2
votes
3answers
438 views

Is there an anti-proxy detection available?

Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they ...
2
votes
2answers
228 views

Why would Tor not be vulnerable to this easy-sounding attack?

I'm thinking of this attack on Tor, which I'm sure won't work, as it is much too simple. Mr. Blackhat sets up lots of intermediate nodes. However, whenever TCP connections come in, they are given ...
2
votes
2answers
641 views

How actually is Tor hidden service hidden from public?

Let's suppose I have a web server X, listening on port N for instance and configured as a Tor hidden service. How and where is implemented its' hiddenness from public access?
2
votes
2answers
735 views

Interesting article on a vulnerability found in Tor

This article describes how French researchers compromised users using Tor. I'm not sure I fully understand or agree with it. I don't see what Bit Torrent has to do with anything? I mean they start out ...
2
votes
2answers
70 views

How do two Tor relays communicate with one another?

Nodes don't know each other's IP address right? So how do they manage to address one another when it comes to sending data?
2
votes
2answers
189 views

Can Tor nodes infect my computer with malware?

Can I get "hacked" by a Tor node? My computer is sending packets through the Tor nodes and receiving packets from them as well. Can I be sure that there are no Tor nodes that manipulate the packets ...
2
votes
1answer
2k views

How can I get the IP address for a ToR Hidden Service (HSP) with a .onion address?

I'd like to find out the IP address of a given .onion address. Is it possible for me to simply assign an exit node (that I control) to my client and just monitor it to determine what IP address ...
2
votes
2answers
715 views

Using tor with SET to bypass firewall policy?

I'm doing a credential harvesting attack using SET from backtrack. I want to sent a spoof email using an open relay server. However, any outbound connection for smtp is blocked by the firewall. I ...
2
votes
4answers
93 views

Does Tor browser work with college network? [closed]

I'm in a system where my modem connects to a college network (KotNet) that monitors its internet traffic. Since I'd like some privacy I was wondering if a Tor browser would hide my identity or if it ...
2
votes
2answers
101 views

Can software projects which accept government funding be trusted?

You may know or probably are using TOR client which provides anonymity to the users but how can one be sure they are secure when browsing using this client and its network since its funded by feds? ...
2
votes
2answers
37 views

Tor and remote desktop viewing

If I am using tor for anonimity, does this prevent staff at a place of employment or an educational institution from remotely viewing my desktop and seeing what I am doing on Tor? If so how can I get ...
2
votes
1answer
589 views

How to run a tor hidden service from home securely?

Another theoretical question about Tor: Imagine I am running a dissident web site as a hidden service. How can I reduce the chances that I get caught? Assume I am running the server from home, over a ...
2
votes
2answers
869 views

Using Tor from behind a Proxy (like Burp Suite)

I am interested in exploring a bit of the darknet, and I was wondering about the feasibility of running a Tor exit node from behind a local proxy like Burp Suite so that I could ID the destination ...
2
votes
2answers
153 views

How are packets received by a Tor exit node routed back through the Tor circuit?

What happens to the packets that the exit node sends/receives from the desired web server? Does each response packet get routed back through the Tor circuit (encrypting on the way) individually? If ...
2
votes
3answers
219 views

What are reasons why one shouldn't run Tor at a network level?

I've been considering proxying all web traffic on my network transparently through Tor and dividing up my bandwidth to share with the rest of the Tor network. Practically speaking, what are some of ...
1
vote
1answer
896 views

How was Lulzsec caught? [closed]

I saw that the leader connected to IRC without using TOR and they traced their IP address, but the identity of each member was supposed to be unknown to the others. So even if the leader was acting as ...
1
vote
2answers
166 views

Can ISP use MITM attack to “break” encrypted traffic?

Use connection of A and B as an example. Their communications were encrypted by Public Key Encryption. Before they exchange their public key, ISP MITM attacked. A got "B"'s public key (ISP generated) ...
1
vote
1answer
2k views

Is TOR used to perform hostile hacking?

I was wondering, if in order to protect myself from hostile hacking, should I consider access via TOR to be OK to perform e.g. havoc without anyone being able to track my ip back?
1
vote
4answers
270 views

Will the “Tor Browser” maintain a safe & anonymous internet connection over a computer's sleep/standby-and-resume cycle?

Will the "Tor Browser" maintain a safe & anonymous internet connection over a computer's sleep/standby-and-resume cycle? Is it safe to assume that when the computer sleeps the (internet) ...
1
vote
2answers
416 views

Tor - chain of connected nodes?

For a long time now I have been wondering how to find out where you actually connect to with Tor. The only thing you can do in Vidalia is show a Network Map of all available Nodes worldwide, which is ...
1
vote
1answer
175 views

What does Bluffdale mean for privacy?

I posted a question related to tracing webserver attacks over here and the responses got me google-ing. My understanding has always been that privacy is dead and that essentially there's always ...
1
vote
1answer
84 views

Is running a TOR node from device in home network secure?

I want to run a TOR node using a small ARM device mini server. I already have a good firewall set but feel a bit uncomfortable when giving away my IP address to the open web by opening a port. If I ...
1
vote
1answer
84 views

Anonymity of Bitcoin

I just asked myself that when you have bitcoin network, which is as we know "pseudo" anonym. Because of the transaction logs of the network (which are afaik endless), it seems that transactions are ...
1
vote
2answers
697 views

Downloading through Tor or not Tor?

If I download a file through TOR, will it be any different than if I download a file through a normal internet browser? I've downloaded stuff through TOR but it's always really slow. I was wondering ...
1
vote
1answer
88 views

Is this a secure way to connect with Tor?

I was discussing the use of tor with a friend, and he happened to suggest a way to remain secure when using applications on the terminal (Lynx, Nmap etc.) His suggestion was this: ssh-keygen -b 4096 ...
1
vote
1answer
195 views

Separating Apache and MySQL over Tor for security, performance, and reliability

I'm trying to set up a hidden web service over the Tor network, and I was thinking of making a configuration where my Apache server and my database server are located on different networks. I know ...
1
vote
1answer
335 views

Tor traffic seems to be exiting from different Tor exit nodes - is that expected?

I seem to be observing some odd behaviour whilst experimenting with TOR. It's entirely possible this is just my own ignorance as well, in which case I would appreciate some ...
1
vote
1answer
495 views

What's most standard way to secure internet connections and protect privacy?

It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
1
vote
2answers
89 views

Tor IP and cookies in hidden services

So when you connect to tor it gives you a specific IP right, who's IP is this exactly? And when you visit an open website who's IP is visible to the site, mine or the exit node. And while you're ...
1
vote
4answers
78 views

Is there a way to make Tor network your full VPN?

Is there a way to use Tor network as your VPN, proxy or something alike? I have been gone to their website but I've seen just browser (Tor Browser), bridge, relay and exit. Is there way to tell ...
1
vote
0answers
84 views

Hidden TrueCrypt Container containing the Tor Browser Bundle

I'm considering using a hidden TrueCrypt container to keep a Tor browser bundle copy which could save bookmarks. In this case, would the TBB leave traces on the OS it started with? E.g. I use my ...
1
vote
1answer
74 views

Is an anonymity network like Tor viable on top of the GPG web of trust?

The web of trust is a graph where the vertices are GPG users (actually, their keys) and the edges are cross-signatures. If we put issues of owner trust aside and assume that all participants only sign ...
1
vote
0answers
58 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
1
vote
0answers
97 views

What is known about recent zero day flaw with Tails up to this point in time and is Tails able to keep us anonymous from a global adversary? [closed]

Following is a excerpt from COMPUTERWORLD Yesterday, in talking about the zero-day vulnerability in Tails, Exodus Intelligence wrote: "We publicized the fact that we’ve discovered these ...
1
vote
1answer
96 views

Multiple gateways (Whonix with Tails)?

I've been reading Whonix's documentation and threads here to be more anonymous and secure. For the best anonymity Whonix recommends having two different computers, one being the gateway and the other ...
1
vote
0answers
106 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat ...
1
vote
1answer
626 views

Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly? [closed]

I want to know how to ensure the most complete anonymity when browsing the internet and connecting to remote servers: I want to be as anonymous and secret as possible. I don't know exactly how VPNs ...