Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

1
vote
3answers
62 views

Using TOR secure

TOR is fully secure only if I use HTTPS, right? But not every site supports it, so I had an idea - some online anonymizers support HTTPS, so if I connect via TOR (TOR - ANONYMIZER - site), will that ...
0
votes
0answers
18 views

Opening Tor-downloaded files while offline

I've read that opening files using certain programs such as Flash or Word can automatically send out information from your computer which may compromise anonymity when using Tor. What I'm wondering ...
2
votes
1answer
29 views

Anonymous communication network - Tor

When using an anonymous communication network like Tor, to ensure privacy you must route your DNS traffic through the system even if your computer always uses DNSSEC for DNS lookups, would this be ...
0
votes
2answers
36 views

Using the TOR network with a Proxy

I have just implemented a new web-filtering proxy system for my organisation, and I was wondering what the recommendations would be to test the use of TOR through this web-proxy. We are doing SSL ...
0
votes
1answer
29 views

Splitting data between wifi networks for security

Does there exist, software or technology, that can use more than one wifi network, in such a way that only part of the data travels through each 'side'? You would probably need an end address like a ...
1
vote
1answer
11 views

Syverson's paper (Users Get Routed), What do they mean by “common locations”?

I am preparing a survey on Tor and its security. While searching for resources, I have come across with the paper Users Get Routed:Traffic Correlation on Tor by Realistic Adversaries. I comprehend the ...
14
votes
4answers
3k views

Differences between using Tor browser and VPN

I can't quite figure out the differences between using the Tor browser and using a VPN (like concretely proXPN). From what I understand the idea is the same, that they both hide the IP address. The ...
4
votes
0answers
73 views

proxychains + dnscrypt + tor

I'm currently working in Kali and I'm trying to boost my security and anonymity online. Please, bear with me for I am no expert yet. Googling and searching here has yielded useful info but not enough ...
1
vote
1answer
173 views

Multiple gateways (Whonix with Tails)?

I've been reading Whonix's documentation and threads here to be more anonymous and secure. For the best anonymity Whonix recommends having two different computers, one being the gateway and the other ...
0
votes
0answers
12 views

Can I use Whonix Gateway as a proxy? [migrated]

I am using Whonix Gateway in a VM, and I run all traffic from my Fedora VM through the Whonix Gateway. Works fine. But, on my host I want to use irssi and a few other apps behind Tor. Usually I would ...
-3
votes
2answers
881 views

Is it possible to retrieve MAC address of a host using Tor?

I know that Tor is used for anonymity while browsing in the Internet. I heard that by using Tor, it is possible to hide my IP. But is it possible to hide my MAC address also?
0
votes
0answers
27 views

why tor nodes maintain tls keys with all other tor nodes?

I read that tor proxy maintains session key with tor nodes and use it while encrypting data but why tor nodes maintain keys with other tor nodes?
1
vote
0answers
34 views

Can we send and receive uTorrent packets through TOR? [migrated]

I just started using pcapy python module to capture network packets. Is it possible to capture packets going out from uTorrent (on my own machine) with pcapy or scapy and sending them over the TOR ...
0
votes
1answer
66 views

Does Google hand over captcha IPs to webmasters?

Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
23
votes
4answers
19k views

How do you get a specific .onion address for your hidden service?

.onion addresses normally should be made of a base32 string of the first 80 bits of the SHA1 hash of the private key of the server (see .onion address specification). Today I ran into a service which ...
2
votes
3answers
1k views

Using Tor from behind a Proxy (like Burp Suite)

I am interested in exploring a bit of the darknet, and I was wondering about the feasibility of running a Tor exit node from behind a local proxy like Burp Suite so that I could ID the destination ...
3
votes
1answer
85 views

How secure are Tor circuits?

Sometime ago I was talking with a friend about security of different anonimity software kits. The most famous software we talked about was Tor. While I was talking about the triple secret used in ...
12
votes
3answers
270 views

Is there any difference between visiting Facebook via their Tor address, and visiting them via their normal address over Tor?

From a security perspective, is visiting via the .onion address more/less secure? I'm using Facebook as an example, but this question is really about any website which has both a 'normal' and a Tor ...
1
vote
3answers
139 views

Tor IP and cookies in hidden services

So when you connect to tor it gives you a specific IP right, who's IP is this exactly? And when you visit an open website who's IP is visible to the site, mine or the exit node. And while you're ...
2
votes
2answers
72 views

Using anonymous email as official email

Assuming I have created an email in hushmail through of tor, and if I use it as my official email in a site such as Github. Will it throw my anonymity away as I use github from a regular browser?
1
vote
2answers
142 views

Is listening to an audio stream through Tor (using Tails) hazardous?

If someone were to listen to a SHOUTcast server through Tor using VLC (not just downloading the M3U playlist through the Tor browser, of course, but while running Tails), would it put their security ...
3
votes
2answers
134 views

Can First Hop Man in the Middle be Defeated with TOR or VPN?

I was reading this article about a certain in flight WiFi provider issuing fake SSL certificates for Google. This doesn't really surprise me all that much since I'm well aware of the concept of ...
4
votes
3answers
8k views

How do you properly setup Tor on Windows 7?

How do you properly setup Tor on a Windows 7 box to guarantee that ALL connections will run through Tor?
5
votes
2answers
94 views

How does Tor guarantee anonymity of Tor network?

To me it seems that the only thing Tor is doing for anonymity (not security!) is the fact that it does not record the traffic in and out, because obviously if every router was recording the traffic ...
0
votes
0answers
92 views

Is a VPN enough to hide my trafic from my schools IT department? [duplicate]

At my school we log on WiFi with a personal login. If I wanted to hide the traffic from my computer from the network administrators would it be enough for me to use a VPN service like for example ...
1
vote
0answers
18 views

Is it possible to combine VPN and TOR on the same connection? [duplicate]

I'm looking into using a Raspberry Pi 2 between my Router and my Modem acting as an VPN and possibly a TOR gateway (two-in-one). It should just be out-of-the-way and passively/transparently route all ...
11
votes
3answers
2k views

Is the fact that Tor's development is largely government funded cause for concern?

In light of recent events, I've been learning more about Tor, and I have a lot of questions. Here's one. Wikipedia's article states; As of 2012, 80% of the Tor Project's $2M annual budget comes ...
0
votes
1answer
53 views

Security of host computer and network with Tor

I'm considering running a Tor (non-exit) relay on my personal Ubuntu 14.04 computer at home (which also has my personal data on it). I wanted to know if I should have any concerns about the security ...
1
vote
1answer
55 views

TOR node in a box [closed]

Let's say I want to help the TOR network - that relies on volunteers to donate bandwidth - but I am not familiar with Linux nor am I hacker of any kind. Is there a product like TOR node in a a box ...
-1
votes
1answer
400 views

How to detect/block i2p traffic? [closed]

From Wikipedia: The Invisible Internet Project (I2P) is a computer network layer that allows applications to send messages to each other pseudonymously and securely. How can I detect/ block ...
5
votes
1answer
2k views

What are the implications of running a TOR non-exit relay node?

Intuitively, running a non-exit TOR node should bring the benefit of plausible deniability that a packet originated from your device. Unlike exit nodes however, you would not have to worry about ...
3
votes
1answer
146 views

In depth TOR encryption design details

I am currently struggling with understanding the details of a connection in tor, mainly because I try to understand PCTCP. In this paper the authors claim that the changes are local to the onion ...
5
votes
1answer
375 views

Can a malicious Tor exit node perform a HTTPS man-in-the-middle attack to see/modify your HTTPS traffic?

Let's say I am browsing the Internet using Tor - visiting https://example.com/login.php - and the NSA is operating the Tor exit node which I am currently routed to use. Can that NSA exit relay swap ...
2
votes
1answer
116 views

Is an anonymity network like Tor viable on top of the GPG web of trust?

The web of trust is a graph where the vertices are GPG users (actually, their keys) and the edges are cross-signatures. If we put issues of owner trust aside and assume that all participants only sign ...
2
votes
4answers
100 views

Is there a way to make Tor network your full VPN?

Is there a way to use Tor network as your VPN, proxy or something alike? I have been gone to their website but I've seen just browser (Tor Browser), bridge, relay and exit. Is there way to tell ...
8
votes
4answers
21k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
5
votes
2answers
369 views

Tor versus direct monitoring

I know if I use Tor and maybe made a tweet, it gives the government a really tough time tracing the originator. But what if like a police car was directly outside my home for instance. Is it still ...
0
votes
0answers
76 views

What registrars support *.onion TLD as a Subject Alternative Name, and how does validation work?

I'm interested in obtaining a .onion TLD in my SAN name from a public CA. Which Public CAs support .onion TLDs and what is the validation process like (e.g. Whois isn't available for ToR) Update: ...
0
votes
1answer
65 views

Is there any “Internet Kill Switch” feature in TOR Browser Bundle?

At times a VPN drops connection and leaks traffic. Some VPNs have "Internet Kill Switch" to stop traffic automatically when this happens. Does TOR browser bundle also have any such feature by default ...
27
votes
3answers
4k views

Why can a Tor exit node decrypt data, but not the entry node?

Me -> Node A -> Node B -> Node C -> destination The documentation on Tor always states that only the exit node C can see plain text data. How is this possible without me talking to Node C ...
3
votes
1answer
105 views

Is tor really fully decentralized?

I think, somewhere an initial list of the connectable peers had to download. Manipulating this list, or the server providing this list, weren't a serious security compromise of the whole network?
5
votes
1answer
138 views

About onion packet and onion routing?

I was just wondering if anyone has a diagram showing what is encrypted inside an onion packet when it leaves the sender? When a Tor client sends the packet out, wouldn't the entry onion node know ...
0
votes
1answer
29 views

Possibility of Correlating Certain User Groups in low-latency Networks

Lets first assume some things: There exists an Adversary There exists a known Group of Users of a certain System. The User can communicate to the System through a small set of (to user and ...
-1
votes
1answer
59 views

Blocking Tor By Trying to Connect to an Entry Node [closed]

So, I had an idea on how to block Tor (or similar tools) from being used on your network (or ISP, which is perhaps more relevant, considering Tor's mission). I'm assuming it wouldn't work (based on ...
11
votes
1answer
198 views

Is TLS in Tor useless?

I am trying to optimize the Orchid Tor client library for my needs and noticed that every connection with every node uses TLS with turned off certificate verification. Actually there are no TLS ...
3
votes
2answers
75 views

Tor and remote desktop viewing

If I am using tor for anonimity, does this prevent staff at a place of employment or an educational institution from remotely viewing my desktop and seeing what I am doing on Tor? If so how can I get ...
31
votes
3answers
10k views

How does “check.torproject.org.” know if you're using TOR?

I'm looking at the results from the following URL and would like to know how does the TOR website "know" that TOR is being used or not. ...
12
votes
3answers
4k views

How does the hacker manage to spoof a different IP address?

For the last 2 days, +/- every 15 minutes, someone is attempting to sign-in to my online email account. When I verify recent activity, the IP address (and the corresponding country) is different for ...
1
vote
1answer
287 views

Is there a way to block all TOR traffic incident on my public servers?

I don't want any connections coming from a tor network to be accepted by my servers.
3
votes
4answers
186 views

Does Tor browser work with college network? [closed]

I'm in a system where my modem connects to a college network (KotNet) that monitors its internet traffic. Since I'd like some privacy I was wondering if a Tor browser would hide my identity or if it ...