Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

1
vote
0answers
3 views

Can ISP use MITM attack to “break” encrypted traffic?

Use connection of A and B as an example. Their communications were encrypted by Public Key Encryption. Before they exchange their public key, ISP MITM attacked. A got "B"'s public key (ISP generated) ...
0
votes
0answers
17 views

What is known about recent zero day flaw with Tails and what level of confidence can we put on Tails to be able to keep us anonymous?

Following is a excerpt from COMPUTERWORLD Yesterday, in talking about the zero-day vulnerability in Tails, Exodus Intelligence wrote: "We publicized the fact that we’ve discovered these ...
3
votes
2answers
106 views

How to get net anonymity while browsing?

I am a college student and am getting free wifi for using the 'Hostel campus" facility ', to access net, I have to put a proxy IP address to my browser. I have heard that they can see what all ...
0
votes
1answer
39 views

Tor, PGP and Tor Entrance Nodes

Imagine alice posts her public PGP key on her website and bob encrypts a widget with that public key then sends it to alice over Tor. If alice's key is widely and publically available and an attacker ...
5
votes
1answer
158 views

What Steps Does An Anonymous Artist Need To Take to Retain Anonymity? [closed]

I read these questions which had great information: How can I keep my identity anonymous as a website owner/administrator? and How much can I trust Tor?, however I wonder if this is too extreme for my ...
2
votes
1answer
329 views

How to run a tor hidden service from home securely?

Another theoretical question about Tor: Imagine I am running a dissident web site as a hidden service. How can I reduce the chances that I get caught? Assume I am running the server from home, over a ...
0
votes
2answers
96 views

How much I can depend on TOR to protect my identity, especially from outlook.com

guys I am using Tor browser from some time, few weeks maybe and I am still trying to determine the level of anonymity that the browser gives. I am using the browser to advertise a service that I am ...
1
vote
2answers
44 views

Tor IP and cookies in hidden services

So when you connect to tor it gives you a specific IP right, who's IP is this exactly? And when you visit an open website who's IP is visible to the site, mine or the exit node. And while you're ...
0
votes
2answers
39 views

how does tor protect data packets? [duplicate]

When you're using tor can't the third parties copy all the data that's going back to your device and decrypt it later, let's say I downloaded some doc files, the data has to come back to your device ...
3
votes
1answer
82 views

How much information can be sniffed at tor exit nodes

When someone is sniffing data at a Tor exit node, how much information can be obtained? The IP can be revealed, but can they see everything you do? Does it make a difference if it is encrypted using ...
3
votes
1answer
99 views

Anonymity network like tor, but using the model of torrent

I am thinking about an anonimity network (just as tor), but using some type of guarantee against mis-usage. For example, which torrent does: there is a tracker, which registers who has given how much ...
-2
votes
1answer
77 views

Using Tor Browser to download files

If I download something, such as a TV series from a filesharing site via the Tor browser - saving the file to my PC - then put it on a flash drive, will my IT department see that I am downloading ...
0
votes
1answer
133 views

Security risk among shared wifi users [duplicate]

I understand that the shared users on a wifi can see each other's HTTP traffic using proper tools. Is it possible for shared users to read HTTPS traffic or encrypted traffic like TOR ?
0
votes
1answer
74 views

Why middleman cannot capture the encryption key of https/tor traffic? [duplicate]

When we use Tor or https traffic , the encryption- decryption key has to be exchanged between the browser and the website server. Why somebody who can capture entire traffic , say ISP or somebody who ...
0
votes
0answers
45 views

Multiple gateways (Whonix with Tails)?

I've been reading Whonix's documentation and threads here to be more anonymous and secure. For the best anonymity Whonix recommends having two different computers, one being the gateway and the other ...
0
votes
1answer
86 views

Using a virtual machine for increased layer of privacy (w/ tor)?

One of my friends told me that running tor in a virtual machine Linux and then passing it through a proxy on the underlying Windows would provide in his words great security. Is this true?
4
votes
1answer
114 views

Tor and (SSL) response

I have two questions regarding Tor (onion routing). How do I receive responds from a server when I use onion routing, I've read that, the last node(exit node) will use the same path I used but in the ...
33
votes
2answers
6k views

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
1
vote
1answer
67 views

Anonymity of Bitcoin

I just asked myself that when you have bitcoin network, which is as we know "pseudo" anonym. Because of the transaction logs of the network (which are afaik endless), it seems that transactions are ...
0
votes
1answer
84 views

VPN tunnel in VPN tunnel

I'm wondering if there is an easy way to establish VPN tunnels through other VPN tunnels to get onion routing like properties (sender anonymity). Since VPN builds a tunnel, it should be easy to set up ...
0
votes
0answers
53 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat ...
0
votes
0answers
14 views

Possibility of Correlating Certain User Groups in low-latency Networks

Lets first asume some things: It exists an adversary It exists a to the adversary known Group of Users of a certain System. The User can communicate to the System through a small set of (to user and ...
16
votes
4answers
12k views

How do you get a specific .onion address for your hidden service?

.onion addresses normally should be made of a base32 string of the first 80 bytes of the SHA1 hash of the private key of the server. Today I ran into a service which clearly doesn't have an arbitrary ...
1
vote
1answer
222 views

Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly? [closed]

I want to know how to ensure the most complete anonymity when browsing the internet and connecting to remote servers: I want to be as anonymous and secret as possible. I don't know exactly how VPNs ...
0
votes
2answers
97 views

Check if i'm using a filtered network [closed]

I would like to know if the connection in my office is filtered, because i cannot access Faceboook neither Youtube but i can access google with no problems, but Tor i can access all the websites. i ...
0
votes
1answer
80 views

Can a Tor exit node be reliably identified?

So with my knowledge of Tor, I know that exit nodes are where packets escape the Tor network and enter the "traceable" internet; ie. you can link an attack to an exit node but not the source of the ...
-1
votes
1answer
59 views

Determine if Tor works

I have installed Tor on my Mint computer, but how do I determine if Tor is working? When I visit http://whatismyip.com, my old IP is shown. Should it not be a different IP when I'm using Tor? Here is ...
5
votes
2answers
207 views

Can Heartbleed expose a TOR user's IP address?

It is interesting to observe, that TOR exit nodes with out-of-date OpenSSL implementations can themselves be affected by the Heartbleed bug. Can Heartbleed expose a TOR user's IP address merely by ...
2
votes
2answers
53 views

How do two Tor relays communicate with one another?

Nodes don't know each other's IP address right? So how do they manage to address one another when it comes to sending data?
9
votes
4answers
3k views

Tor and regular browser side by side. Does that make sense?

Can I use a Tor browser session and a regular Firefox session side by side without corrupting the security of the Tor session? E.g. when I download a new Eclipse version or when I'm searching for ...
1
vote
4answers
199 views

Will the “Tor Browser” maintain a safe & anonymous internet connection over a computer's sleep/standby-and-resume cycle?

Will the "Tor Browser" maintain a safe & anonymous internet connection over a computer's sleep/standby-and-resume cycle? Is it safe to assume that when the computer sleeps the (internet) ...
1
vote
2answers
378 views

Tor - chain of connected nodes?

For a long time now I have been wondering how to find out where you actually connect to with Tor. The only thing you can do in Vidalia is show a Network Map of all available Nodes worldwide, which is ...
13
votes
4answers
4k views

Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?

DuckDuckGo is a search engine that has a Tor Exit Enclave and hidden service. This site is focused on the safe, secure searching of its users. Since DNS is not used in Tor, it appears that HTTPS is ...
2
votes
3answers
192 views

What are reasons why one shouldn't run Tor at a network level?

I've been considering proxying all web traffic on my network transparently through Tor and dividing up my bandwidth to share with the rest of the Tor network. Practically speaking, what are some of ...
62
votes
6answers
10k views

How much can I trust Tor?

How much can I depend on Tor for anonymity? Is it completely secure? My usage is limited to accessing Twitter and Wordpress. I am a political activist from India and I do not enjoy the freedom of ...
2
votes
2answers
90 views

Can software projects which accept government funding be trusted?

You may know or probably are using TOR client which provides anonymity to the users but how can one be sure they are secure when browsing using this client and its network since its funded by feds? ...
0
votes
1answer
88 views

Is there a way of determining if tor is running on a remote machine?

In most of the companies, IT guys block some sites and by using TOR or other VPNs people walk around these blocks and gain access to blocked content. My question is, assuming TOR is running on ...
5
votes
2answers
302 views

Is the connection to Tor hidden services encrypted?

It's possible for Tor exit nodes to sniff traffic on normal websites, unless you connect via SSL/HTTPS. But what about hidden services, they don't seem to support the HTTPS protocol. Can the exit ...
3
votes
2answers
202 views

Tor traffic correlation attacks by global adversaries

I recently came across a paper called "Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries" (Aaron Johnson et al) ... which seems to be saying that adversaries (like the NSA) that ...
6
votes
4answers
15k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
1
vote
2answers
274 views

Downloading through Tor or not Tor?

If I download a file through TOR, will it be any different than if I download a file through a normal internet browser? I've downloaded stuff through TOR but it's always really slow. I was wondering ...
4
votes
3answers
171 views

In Tor, what stops the end server from following the breadcrumbs back to their origin?

This would probably require knocking on people's doors, but — couldn't the endpoint ask the exit node what the relay node was, and then ask the relay node what the entry node was, and then ask the ...
28
votes
8answers
6k views

If I visit a HTTPS website when using Tor, is my IP exposed?

HTTPS is an end-to-end encrypted connection. Given this, does the website I am visiting know my original IP? The website is only available over HTTPS (not unencrypted HTTP).
-2
votes
1answer
171 views

Surfing web anonymously on a mac using Firefox SSH and Tor [duplicate]

I want to download and upload to the internet anonymously. I have successfully configured Forefox to access internet through a secure SSH tunnel service (and remote server). I use 'SSH Tunnel Manager' ...
1
vote
1answer
152 views

Separating Apache and MySQL over Tor for security, performance, and reliability

I'm trying to set up a hidden web service over the Tor network, and I was thinking of making a configuration where my Apache server and my database server are located on different networks. I know ...
19
votes
4answers
952 views

Can anonymizing techniques make you less anonymous?

There's a recent report in the news of a Harvard student who emailed in a bomb threat so as to postpone year-end exams. According to the report, he carefully covered his tracks using the best ...
3
votes
1answer
970 views

What are the implications of running a TOR non-exit relay node?

Intuitively, running a non-exit TOR node should bring the benefit of plausible deniability that a packet originated from your device. Unlike exit nodes however, you would not have to worry about ...
18
votes
1answer
1k views

Could someone explain parts of the FBI's Firefox 0-day?

Here is the full Javascript (and related iframes) that the FBI apparently injected into all "Freedom Hosting" pages in the course of their recent takedown. http://pastebin.mozilla.org/2776374 The ...
0
votes
2answers
177 views

Can Tor browser bundle be attacked like this?

When using the Tor browser bundle, you load the check.torproject.org on start. It tells you when there is a security update to downloads, and let's you click a link to get it. The way for users to ...
2
votes
3answers
1k views

How Tor, Privoxy, Vidalia and Polipo are getting together?

I realized that these applications are frequently used together. What is the role of each software in the mission of anonymity and privacy on the web? While I understand Vidalia is a GUI provider, I ...