Tagged Questions

Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

18
votes
4answers
14k views

How do you get a specific .onion address for your hidden service?

.onion addresses normally should be made of a base32 string of the first 80 bytes of the SHA1 hash of the private key of the server. Today I ran into a service which clearly doesn't have an arbitrary ...
0
votes
2answers
239 views

Is encryption of Onion Proxy possible?

I wanted to know that if we are using onion routing in P2P networks, and when the data comes from the provider to onion proxy(proxy connected with requester), the data is not any more encrypted, ...
1
vote
2answers
404 views

Tor - chain of connected nodes?

For a long time now I have been wondering how to find out where you actually connect to with Tor. The only thing you can do in Vidalia is show a Network Map of all available Nodes worldwide, which is ...
1
vote
2answers
1k views

Best practices for operating a Bitcoin-Qt client regarding netwok privacy?

As privacy is part of security, I know there is a Bitcoin SE here but they couldn't answer my question so I hope it's appropriate to ask it here. I don't ask about how to secure my wallet on my ...
8
votes
4answers
6k views

How is Tor secure?

If Tor is open source and thus its process of concealing your IP is known, then how does it keep anything secure? Couldn't someone look at the source code and figure out how to reverse the routing ...
1
vote
1answer
487 views

What's most standard way to secure internet connections and protect privacy?

It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
7
votes
1answer
4k views

How to connect Tor to the web using a specific server?

Some websites restrict access based on which country the accessing IP comes from. I'd like to use TOR to circumvent such restrictions. So I'd like to use an exit node that's located in a specific ...
-5
votes
2answers
261 views

What technologies are recommended for E-banking? [closed]

If a Linux user need use his bank account from Internet, then what technologies and procedures should use? Is better to use the Guest Account (if exist) of the OS, or an Administrator Account? What ...
7
votes
1answer
6k views

Why is it so hard to close onion domains (e.g. The Silkroad)?

A few months ago when I started to experiment with bitcoin I came across The Silkroad (only accessible via Tor) For those who do not know what Tor is and who do not want to waste their time ...
11
votes
2answers
2k views

How does Tor protect against fake entry nodes / total redirection?

There is much material on how to protect yourself from malicous exit nodes, especially by using SSL and minimizing the leakage of identifying information (user-agent, screen size, etc.). However, I ...
9
votes
1answer
2k views

How are tor hidden nodes/services found?

Tor has "hidden services", which have an address like duskgytldkxiuqc6.onion. Now I was wondering: how is this duskgytldkxiuqc6.onion name mapped to the real server? I don't think there's a central ...
1
vote
1answer
2k views

Is TOR used to perform hostile hacking?

I was wondering, if in order to protect myself from hostile hacking, should I consider access via TOR to be OK to perform e.g. havoc without anyone being able to track my ip back?
2
votes
2answers
692 views

Using tor with SET to bypass firewall policy?

I'm doing a credential harvesting attack using SET from backtrack. I want to sent a spoof email using an open relay server. However, any outbound connection for smtp is blocked by the firewall. I ...
3
votes
1answer
387 views

anonymization for scanning and hacking

What kind of anonymization can be used for scanning and exploiting? Of course there are VPNs and VPS, but thats a different story. I know some scanning can be done via TOR, but how can an exploit or ...
6
votes
4answers
17k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
0
votes
1answer
1k views

tor and widecap dns leak

I am using a program that I coded in C#. All it does is use HttpWebRequest to request some pages and read info from them. I tried running it through Tor. I installed the Vidalia Bundle and Widecap. My ...
4
votes
2answers
7k views

How do you properly setup Tor on Windows 7?

How do you properly setup Tor on a Windows 7 box to guarantee that ALL connections will run through Tor?
2
votes
2answers
725 views

Interesting article on a vulnerability found in Tor

This article describes how French researchers compromised users using Tor. I'm not sure I fully understand or agree with it. I don't see what Bit Torrent has to do with anything? I mean they start out ...
3
votes
2answers
959 views

How to run a Tor exit node securely on a vps

I want to run a TOR exit node on a vps, what security measures do I have to put in place on the vps? I know it will be a huge target for hackers and the three letter word agencies in the USA so I need ...
1
vote
1answer
172 views

What does Bluffdale mean for privacy?

I posted a question related to tracing webserver attacks over here and the responses got me google-ing. My understanding has always been that privacy is dead and that essentially there's always ...
3
votes
3answers
367 views

Are there any same origin issues (SOP) with TOR?

Are there any issues with Same Origin Policy (SOP) with TOR or *.onion addresses? I'm thinking of cookies Plugins (Silverlight, Flash, Java, etc) Javascript
28
votes
3answers
9k views

How does “check.torproject.org.” know if you're using TOR?

I'm looking at the results from the following URL and would like to know how does the TOR website "know" that TOR is being used or not. ...
13
votes
4answers
4k views

Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?

DuckDuckGo is a search engine that has a Tor Exit Enclave and hidden service. This site is focused on the safe, secure searching of its users. Since DNS is not used in Tor, it appears that HTTPS is ...
4
votes
1answer
311 views

Tor: requesting a tor website

When you have a website that's hosted within the Tor network and one accesses this website with a Tor browser, does this person still use an exit-node ? Or will this be an encrypted connection ...
11
votes
8answers
7k views

How anonymous is my setup?

my friend and I are trying to make the most anonymous setup for a computer to do things across the internet without being known the location from which it came. Our setup is as follows: A windows ...
5
votes
1answer
7k views

Bypassing a captive portal with tor

I know that NSXTS and Iodine can be used to bypass a captive portal by taking advantage of permissive DNS firewall rules. What I have found recently is that simply by using Tor, I can also bypass a ...
66
votes
6answers
11k views

How much can I trust Tor?

How much can I depend on Tor for anonymity? Is it completely secure? My usage is limited to accessing Twitter and Wordpress. I am a political activist from India and I do not enjoy the freedom of ...