Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.
38
votes
4answers
5k views
How much can I trust Tor?
Greetings.
How much can I depend on Tor for anonymity? Is it completely secure? My usage is limited to accessing Twitter and Wordpress.
I am a political activist from India and I do not enjoy the ...
18
votes
3answers
3k views
How does “check.torproject.org.” know if you're using TOR?
I'm looking at the results from the following URL and would like to know how does the TOR website "know" that TOR is being used or not.
...
12
votes
4answers
2k views
Does TOR Hidden Service Protocol provide more threat protection than a standard HTTPS session?
DuckDuckGo is a search engine that has a TOR Exit Enclave. This site is focused on the safe, secure searching of its users.
Since DNS is not used in TOR, it appears that HTTPS is less secure due to ...
10
votes
8answers
4k views
How anonymous is my setup?
my friend and I are trying to make the most anonymous setup for a computer to do things across the internet without being known the location from which it came.
Our setup is as follows:
A windows ...
10
votes
3answers
1k views
How do you get a specific .onion address for your hidden service?
.onion addresses normally should be made of a base32 string of the first 80 bytes of the SHA1 hash of the private key of the server.
Today I ran into a service which clearly doesn't have an arbitrary ...
7
votes
1answer
442 views
How does Tor protect against fake entry nodes / total redirection?
There is much material on how to protect yourself from malicous exit nodes, especially by using SSL and minimizing the leakage of identifying information (user-agent, screen size, etc.).
However, I ...
6
votes
1answer
3k views
Why is it so hard to close onion domains (e.g. The Silkroad)?
A few months ago when I started to experiment with bitcoin I came across The Silkroad (only accessible via Tor)
For those who do not know what Tor is and who do not want to waste their time ...
6
votes
1answer
905 views
How are tor hidden nodes/services found?
Tor has "hidden services", which have an address like duskgytldkxiuqc6.onion.
Now I was wondering: how is this duskgytldkxiuqc6.onion name mapped to the real server?
I don't think there's a central ...
5
votes
5answers
750 views
Is a TOR router really safer than a proxy?
If I use a tor router to browse the regular internet that it has to leave the TOR network through an exit node. Apparently the exit node has all the information from the original user it came from on ...
5
votes
4answers
2k views
How is Tor secure?
If Tor is open source and thus its process of concealing your IP is known, then how does it keep anything secure? Couldn't someone look at the source code and figure out how to reverse the routing ...
5
votes
1answer
573 views
How to connect Tor to the web using a specific server?
Some websites restrict access based on which country the accessing IP comes from. I'd like to use TOR to circumvent such restrictions. So I'd like to use an exit node that's located in a specific ...
5
votes
4answers
4k views
Advanced techniques for detecting a proxy/getting original IP
In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used:
Firefox with a proxy ...
5
votes
1answer
237 views
Could TOR nodes collect IPs and filter them to unmask .onion url IP addresses?
I feel that I generally understand TOR onion routing. From what I understand, the node knows the IP it is receiving data from and the IP it is sending data to. So surely a node can collect the IP ...
4
votes
4answers
426 views
What are the disadvantages of Tor?
I've just started using Tor recently, and I'm not sure exactly what security issues come with the benefits.
What should/shouldn't I be worried about (in both everyday normal-web browsing use, in ...
4
votes
1answer
87 views
TOR detection in network
After I read this link, I tried to understand how they manage detect TOR traffic
The most understandable source for me was this paper
He is saying TOR trafic can be detected by port, cipher suite ...
4
votes
2answers
2k views
How do you properly setup Tor on Windows 7?
How do you properly setup Tor on a Windows 7 box to guarantee that ALL connections will run through Tor?
4
votes
1answer
3k views
Bypassing a captive portal with tor
I know that NSXTS and Iodine can be used to bypass a captive portal by taking advantage of permissive DNS firewall rules.
What I have found recently is that simply by using Tor, I can also bypass a ...
4
votes
3answers
295 views
Are there any same origin issues (SOP) with TOR?
Are there any issues with Same Origin Policy (SOP) with TOR or *.onion addresses?
I'm thinking of
cookies
Plugins (Silverlight, Flash, Java, etc)
Javascript
3
votes
1answer
209 views
Tor: requesting a tor website
When you have a website that's hosted within the Tor network and one accesses this website with a Tor browser, does this person still use an exit-node ?
Or will this be an encrypted connection ...
2
votes
2answers
420 views
How safe is Tor from MITM/snooping attacks?
I am behind an HTTP proxy, and I frequently tunnel out via an ssh -D SOCKS proxy (I have access to a couple of outside servers which I can tunnel to) when the HTTP proxy causes problems1.
Now, this ...
2
votes
2answers
517 views
Interesting article on a vulnerability found in Tor
This article describes how French researchers compromised users using Tor. I'm not sure I fully understand or agree with it. I don't see what Bit Torrent has to do with anything? I mean they start out ...
2
votes
2answers
420 views
Using tor with SET to bypass firewall policy?
I'm doing a credential harvesting attack using SET from backtrack. I want to sent a spoof email using an open relay server. However, any outbound connection for smtp is blocked by the firewall.
I ...
2
votes
1answer
219 views
anonymization for scanning and hacking
What kind of anonymization can be used for scanning and exploiting? Of course there are VPNs and VPS, but thats a different story. I know some scanning can be done via TOR, but how can an exploit or ...
2
votes
2answers
483 views
How to run a Tor exit node securely on a vps
I want to run a TOR exit node on a vps, what security measures do I have to put in place on the vps? I know it will be a huge target for hackers and the three letter word agencies in the USA so I need ...
1
vote
2answers
242 views
Is there an anti-proxy detection available?
Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they ...
1
vote
1answer
144 views
How was Lulzsec caught? [closed]
I saw that the leader connected to IRC without using TOR and they traced their IP address, but the identity of each member was supposed to be unknown to the others. So even if the leader was acting as ...
1
vote
1answer
859 views
Is TOR used to perform hostile hacking?
I was wondering, if in order to protect myself from hostile hacking, should I consider access via TOR to be OK to perform e.g. havoc without anyone being able to track my ip back?
1
vote
1answer
127 views
What does Bluffdale mean for privacy?
I posted a question related to tracing webserver attacks over here and the responses got me google-ing. My understanding has always been that privacy is dead
and that essentially there's always ...
1
vote
1answer
151 views
Tor traffic seems to be exiting from different Tor exit nodes - is that expected?
I seem to be observing some odd behaviour whilst experimenting with TOR. It's entirely possible this is just my own ignorance as well, in which case I would appreciate some ...
1
vote
1answer
304 views
What's most standard way to secure internet connections and protect privacy?
It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
1
vote
2answers
80 views
Using Tor from behind a Proxy (like Burp Suite)
I am interested in exploring a bit of the darknet, and I was wondering about the feasibility of running a Tor exit node from behind a local proxy like Burp Suite so that I could ID the destination ...
1
vote
2answers
403 views
Best practices for operating a Bitcoin-Qt client regarding netwok privacy?
As privacy is part of security, I know there is a Bitcoin SE here but they couldn't answer my question so I hope it's appropriate to ask it here.
I don't ask about how to secure my wallet on my ...
0
votes
1answer
645 views
tor and widecap dns leak
I am using a program that I coded in C#.
All it does is use HttpWebRequest to request some pages and read info from them.
I tried running it through Tor. I installed the Vidalia Bundle and Widecap.
My ...
0
votes
2answers
177 views
Tor - chain of connected nodes?
For a long time now I have been wondering how to find out where you actually connect to with Tor.
The only thing you can do in Vidalia is show a Network Map of all available Nodes worldwide, which is ...
0
votes
2answers
162 views
Is encryption of Onion Proxy possible?
I wanted to know that if we are using onion routing in P2P networks, and when the data comes from the provider to onion proxy(proxy connected with requester), the data is not any more encrypted, ...
-5
votes
2answers
136 views
What technologies are recommended for E-banking? [closed]
If a Linux user need use his bank account from Internet, then what technologies and procedures should use?
Is better to use the Guest Account (if exist) of the OS, or an Administrator Account?
What ...
-5
votes
1answer
77 views
Is there a way to get Tor “for free”? (free as in time, not money)
I'm wondering if there's a way to get the functionality for Tor in Firefox (or my general OS) for "free", meaning that I spend 10 minutes setting up part of the functionality to work and skip the ...
