Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

-2
votes
2answers
72 views

Is it possible to retrieve MAC address of a host using Tor?

I know that Tor is used for anonymity while browsing in the Internet. I heard that by using Tor, it is possible to hide my IP. But is it possible to hide my MAC address also?
-2
votes
0answers
31 views

What is the use of TOR? [duplicate]

I am using Linux system in my LAN. Can i stay anonymous by using TOR? How to setup TOR & What are the drawbacks. Can anyone explain.
20
votes
2answers
4k views

In the SilkRoad takedown, what does it mean “An IP address was leaking” in Tor?

According to the official complaint, on Page 28 they mention: on May 24, 2013, a Silk Road user sent him a private message warning him that "some sort of external IP address" was "leaking" from ...
0
votes
3answers
53 views

TOR security if ISP blocks TLS channel?

If ISP blocks TLS channel while a user is using TOR, can he read the TOR traffic, since TOR uses TLS encryption ?
2
votes
2answers
60 views

How are packets received by a Tor exit node routed back through the Tor circuit?

What happens to the packets that the exit node sends/receives from the desired web server? Does each response packet get routed back through the Tor circuit (encrypting on the way) individually? If ...
-1
votes
1answer
73 views

Anonymity with TOR in wifi connection (student house)

I just moved in a student flat where several students are using the same wifi connection. A few days ago the internet was very slow and a guy (son of the owner) came in to ask if I was downloading. He ...
10
votes
2answers
2k views

How does Tor protect against fake entry nodes / total redirection?

There is much material on how to protect yourself from malicous exit nodes, especially by using SSL and minimizing the leakage of identifying information (user-agent, screen size, etc.). However, I ...
0
votes
1answer
64 views

Is running a TOR node from device in home network secure?

I want to run a TOR node using a small ARM device mini server. I already have a good firewall set but feel a bit uncomfortable when giving away my IP address to the open web by opening a port. If I ...
0
votes
1answer
112 views

Is there a way of determining if tor is running on a remote machine?

In most of the companies, IT guys block some sites and by using TOR or other VPNs people walk around these blocks and gain access to blocked content. My question is, assuming TOR is running on ...
0
votes
4answers
559 views

How can i protect myself from tor vulnerability on windows

Recently I came across an article regarding Tor. According to article there is speculation that the uncovered malware was used by a law enforcement agency to harvest the IP addresses of users ...
2
votes
3answers
414 views

Is there an anti-proxy detection available?

Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they ...
18
votes
3answers
4k views

Can my workplace view my Tor traffic? [duplicate]

I connect to the internet using my company's Wi-Fi and Tor. Can they still see the websites I visit?
2
votes
2answers
107 views

Can Tor nodes infect my computer with malware?

Can I get "hacked" by a Tor node? My computer is sending packets through the Tor nodes and receiving packets from them as well. Can I be sure that there are no Tor nodes that manipulate the packets ...
3
votes
2answers
126 views

How to get net anonymity while browsing?

I am a college student and am getting free wifi for using the 'Hostel campus" facility ', to access net, I have to put a proxy IP address to my browser. I have heard that they can see what all ...
1
vote
0answers
42 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
4
votes
2answers
182 views

What is the ideal anonymous workstation setup? [closed]

My goal is to build a perfect stationary workstation from which I can work anonymously. Most instructions on being anonymous usually involve, at some point, moving around and switching from coffee ...
36
votes
2answers
7k views

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
1
vote
0answers
80 views

What is known about recent zero day flaw with Tails up to this point in time and is Tails able to keep us anonymous from a global adversary? [closed]

Following is a excerpt from COMPUTERWORLD Yesterday, in talking about the zero-day vulnerability in Tails, Exodus Intelligence wrote: "We publicized the fact that we’ve discovered these ...
-1
votes
1answer
171 views

“VPN -> Tor: Go to jail” - What's the logic behind this?

The VPN won't see anymore than your ISP already is. So even if the VPN was logging everything you did, shouldn't it just leave you in status quo? How can it ever compromise your identity, that you ...
6
votes
1answer
143 views

TOR: I'm repeatedly being connected to a couple of Entry Nodes!

I'm using TOR (Orbot for Android), and when I look at the log of the connection establishment phase, I see that I'm repeatedly being connected to familiar nodes, especially the Entry Nodes which 3 out ...
1
vote
2answers
127 views

Can ISP use MITM attack to “break” encrypted traffic?

Use connection of A and B as an example. Their communications were encrypted by Public Key Encryption. Before they exchange their public key, ISP MITM attacked. A got "B"'s public key (ISP generated) ...
0
votes
1answer
59 views

Tor, PGP and Tor Entrance Nodes

Imagine alice posts her public PGP key on her website and bob encrypts a widget with that public key then sends it to alice over Tor. If alice's key is widely and publically available and an attacker ...
5
votes
1answer
183 views

What Steps Does An Anonymous Artist Need To Take to Retain Anonymity? [closed]

I read these questions which had great information: How can I keep my identity anonymous as a website owner/administrator? and How much can I trust Tor?, however I wonder if this is too extreme for my ...
2
votes
1answer
433 views

How to run a tor hidden service from home securely?

Another theoretical question about Tor: Imagine I am running a dissident web site as a hidden service. How can I reduce the chances that I get caught? Assume I am running the server from home, over a ...
0
votes
2answers
120 views

How much I can depend on TOR to protect my identity, especially from outlook.com

guys I am using Tor browser from some time, few weeks maybe and I am still trying to determine the level of anonymity that the browser gives. I am using the browser to advertise a service that I am ...
1
vote
2answers
59 views

Tor IP and cookies in hidden services

So when you connect to tor it gives you a specific IP right, who's IP is this exactly? And when you visit an open website who's IP is visible to the site, mine or the exit node. And while you're ...
0
votes
2answers
46 views

how does tor protect data packets? [duplicate]

When you're using tor can't the third parties copy all the data that's going back to your device and decrypt it later, let's say I downloaded some doc files, the data has to come back to your device ...
3
votes
1answer
120 views

How much information can be sniffed at tor exit nodes

When someone is sniffing data at a Tor exit node, how much information can be obtained? The IP can be revealed, but can they see everything you do? Does it make a difference if it is encrypted using ...
3
votes
1answer
107 views

Anonymity network like tor, but using the model of torrent

I am thinking about an anonimity network (just as tor), but using some type of guarantee against mis-usage. For example, which torrent does: there is a tracker, which registers who has given how much ...
-2
votes
1answer
103 views

Using Tor Browser to download files

If I download something, such as a TV series from a filesharing site via the Tor browser - saving the file to my PC - then put it on a flash drive, will my IT department see that I am downloading ...
0
votes
1answer
143 views

Security risk among shared wifi users [duplicate]

I understand that the shared users on a wifi can see each other's HTTP traffic using proper tools. Is it possible for shared users to read HTTPS traffic or encrypted traffic like TOR ?
0
votes
1answer
93 views

Why middleman cannot capture the encryption key of https/tor traffic? [duplicate]

When we use Tor or https traffic , the encryption- decryption key has to be exchanged between the browser and the website server. Why somebody who can capture entire traffic , say ISP or somebody who ...
0
votes
0answers
62 views

Multiple gateways (Whonix with Tails)?

I've been reading Whonix's documentation and threads here to be more anonymous and secure. For the best anonymity Whonix recommends having two different computers, one being the gateway and the other ...
0
votes
1answer
114 views

Using a virtual machine for increased layer of privacy (w/ tor)?

One of my friends told me that running tor in a virtual machine Linux and then passing it through a proxy on the underlying Windows would provide in his words great security. Is this true?
4
votes
1answer
124 views

Tor and (SSL) response

I have two questions regarding Tor (onion routing). How do I receive responds from a server when I use onion routing, I've read that, the last node(exit node) will use the same path I used but in the ...
1
vote
1answer
79 views

Anonymity of Bitcoin

I just asked myself that when you have bitcoin network, which is as we know "pseudo" anonym. Because of the transaction logs of the network (which are afaik endless), it seems that transactions are ...
0
votes
1answer
95 views

VPN tunnel in VPN tunnel

I'm wondering if there is an easy way to establish VPN tunnels through other VPN tunnels to get onion routing like properties (sender anonymity). Since VPN builds a tunnel, it should be easy to set up ...
0
votes
0answers
70 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat ...
0
votes
0answers
15 views

Possibility of Correlating Certain User Groups in low-latency Networks

Lets first asume some things: It exists an adversary It exists a to the adversary known Group of Users of a certain System. The User can communicate to the System through a small set of (to user and ...
16
votes
4answers
13k views

How do you get a specific .onion address for your hidden service?

.onion addresses normally should be made of a base32 string of the first 80 bytes of the SHA1 hash of the private key of the server. Today I ran into a service which clearly doesn't have an arbitrary ...
1
vote
1answer
356 views

Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly? [closed]

I want to know how to ensure the most complete anonymity when browsing the internet and connecting to remote servers: I want to be as anonymous and secret as possible. I don't know exactly how VPNs ...
0
votes
2answers
130 views

Check if i'm using a filtered network [closed]

I would like to know if the connection in my office is filtered, because i cannot access Faceboook neither Youtube but i can access google with no problems, but Tor i can access all the websites. i ...
0
votes
1answer
121 views

Can a Tor exit node be reliably identified?

So with my knowledge of Tor, I know that exit nodes are where packets escape the Tor network and enter the "traceable" internet; ie. you can link an attack to an exit node but not the source of the ...
-1
votes
1answer
68 views

Determine if Tor works

I have installed Tor on my Mint computer, but how do I determine if Tor is working? When I visit http://whatismyip.com, my old IP is shown. Should it not be a different IP when I'm using Tor? Here is ...
5
votes
2answers
217 views

Can Heartbleed expose a TOR user's IP address?

It is interesting to observe, that TOR exit nodes with out-of-date OpenSSL implementations can themselves be affected by the Heartbleed bug. Can Heartbleed expose a TOR user's IP address merely by ...
2
votes
2answers
60 views

How do two Tor relays communicate with one another?

Nodes don't know each other's IP address right? So how do they manage to address one another when it comes to sending data?
9
votes
4answers
4k views

Tor and regular browser side by side. Does that make sense?

Can I use a Tor browser session and a regular Firefox session side by side without corrupting the security of the Tor session? E.g. when I download a new Eclipse version or when I'm searching for ...
1
vote
4answers
240 views

Will the “Tor Browser” maintain a safe & anonymous internet connection over a computer's sleep/standby-and-resume cycle?

Will the "Tor Browser" maintain a safe & anonymous internet connection over a computer's sleep/standby-and-resume cycle? Is it safe to assume that when the computer sleeps the (internet) ...
1
vote
2answers
394 views

Tor - chain of connected nodes?

For a long time now I have been wondering how to find out where you actually connect to with Tor. The only thing you can do in Vidalia is show a Network Map of all available Nodes worldwide, which is ...
13
votes
4answers
4k views

Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?

DuckDuckGo is a search engine that has a Tor Exit Enclave and hidden service. This site is focused on the safe, secure searching of its users. Since DNS is not used in Tor, it appears that HTTPS is ...