Hot answers tagged

110

Tor is used to circumvent censorship! No, not directly. Tor is about anonymity, not about availability. Tor alone does not help its users access blocked content. Tor helps by making it hard to link clients with site visits, so that people can publish content without being identified. A government that controls all the network equipment of ISPs in the ...


94

In order to block Tor all that has to be done is have the current list of Tor nodes which can be found at the following link: http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv and then block them bidirectionally via the Routers or Firewalls. That said there will be numerous ways around such efforts, people can still use VPN's to connect ...


81

As a very long time Tor user, the most surprising part of the NSA documents for me was how little progress they have made against Tor. Despite its known weaknesses, it's still the best thing we have, provided it's used properly and you make no mistakes. Since you want security of "the greatest degree technically feasible", I'm going to assume that your ...


57

TOR is better for you than it is for people in countries whose intelligence services run lots of TOR exit nodes and sniff the traffic. However, all you should assume when using TOR is that, if someone's not doing heavy statistical traffic analysis, they can't directly correlate your IP with the IP requesting resources at the server. That leaves many, many ...


53

First: Don't use work computers for personal use, people! Many network policies forbid personal use. Our policy states that personal use is not forbidden but is monitored. If you don't want to be monitored you need to use equipment you control. TL;DR: If you don't want your parents to know you smoke, don't smoke in front of your parents. Work ...


51

Tor uses a routing method called Onion routing. Much like an onion, each message (the core of the onion) is covered with layers of encryption. image attribution Your message is encrypted several times before it leaves your device. Node A can only decrypt (peel) the layer A, under which it would see the address of the next node. After the packet reaches the ...


37

Tor will be actually quite hard to block because of tor bridges: Bridge relays (or "bridges" for short) are Tor relays that aren't listed in the main Tor directory. Since there is no complete public list of them, even if your ISP is filtering connections to all the known Tor relays, they probably won't be able to block all the bridges. To ban Tor ...


36

Shallot is an older program, there are newer alternatives available now: Scallion - uses GPU hashing, needs .NET or Mono: http://github.com/lachesis/scallion Eschalot - uses wordlist search, needs Unix or Linux: http://blacksunhq56imku.onion Eschalot can find longer human-readable names like seedneedgoldcf6m.onion, hostbathdarkviph.onion, etc. The ...


35

No, it won't. The thing is that when you use HTTPs over TOR you: you use the public key of the server to encipher your message (so nobody except the server will be able to read your message). then you pass the HTTPs message (which, remember, is encrypted with the public key of the server) to a TOR node, this TOR node to another, and another and... ...


35

Perhaps it's worth mentioning that the impact of resizing your browser on your privacy heavily depends on what window size you set. Maximizing Tor browser on a screen with a standard resolution like 1280x1024 or 1080p is not too bad - lost of people have screens like that, and you probably won't end up being the only one with that resolution. The adversary ...


34

It is an information leak on the Silk Road server. It appears somebody located a debug or info screen on the Silk Road server that dumped configuration and environment variables. Some possibilities: The output of Apache's mod_status (example) Output of phpinfo() (example) A custom debug page that is part of the Silk Road application It could have been ...


34

If you are in a crowd and you wear a mask, but nobody else in the crowd does, then you tend to attract attention... If you want to remain anonymous, then you must use only tools which do not single you out as a potential miscreant, i.e. tools that everybody uses. A good example is when you pay in cash: this is a mostly traceless payment system, and yet ...


31

VPNs Traditional A traditional Virtual Private Network does not extend your ISP. A VPN extends an existing private network across a public network. For example, lets say my company has a private network with email servers, web servers (intranet), and DNS setup for company related services. It's a private network for company employees only. However, ...


30

TOR, VPN, bots, proxies, you name it.. The source IP is not "spoofed" per se... it's the real deal. If someone really spoofed a source IP, they couldn't establish a TCP connection or receive any replies. The source IP spoofing method is more useful over UDP when launching an amplification attack to a victim/spoofed IP.


29

Generally speaking No. Assuming: You follow Tor's best practices Tor does not protect all of your computer's Internet traffic when you run it. Tor only protects your applications that are properly configured to send their Internet traffic through Tor. To avoid problems with Tor configuration, we strongly recommend you use the Tor Browser. so if ...


27

2013 calling I think this question deserves a new answer after what we know now. Given the financial sources of the Tor project and what we learned about the NSA inserting backdoors (e.g. see here) casts a shadow on the trustworthiness of the project. From the annual report for last year (linked above): However, keep in mind that the US government ...


25

You would also need to be careful of the fact that your ISP is in a position to see that 'your IP address' is using Tor, even though it can't tell what you're using Tor for. If conditions are so hostile that you could be brought under suspicion simply for appearing to be clandestine, then you should take care to use Tor everwhere except on an Internet ...


25

Tor provides privacy only under the assumption that at least one node in the randomly selected chain is not attacker-controlled (since we are talking about traffic analysis, simply eavesdropping on traffic entering and exiting this node, without trying to decrypt it, counts as "control"). This is probabilistic. If the attacker controls, say, 50% of all ...


21

In Tor, the user (you) chooses a random path through several nodes for its data. The first node in the path knows your IP address, but not what you send or where. The last node ("exit node") knows the target server address and sees the data (unless SSL is used, of course), but not your IP address. Every node in the path knows only the addresses of the ...


20

Yes you can run them side by side and not corrupt the security. This is because your Tor browser will send everything through a Tor proxy (including DNS requests) and your normal browser won't. Do mind that: If the NSA really would like to know what you are doing then they will find a way, bug your house, target your computer with malware, ... .


18

I think it's important here not to overstate the capabilities of the various Three Letter Agencies with regards to identifying Tor users. The very first slide notes that they "...will never be able to de-anonymize all Tor users all the time". This means that the fundamentals of Tor are sound. The slide then goes on to note that "...with manual analysis we ...


17

It does give you considerably more protection than browsing directly. There are some identified weaknesses which offer potential routes to attack your computer, however these can be mitigated using normal protection on your machine (ie patch/av up to date, run as unprivileged user etc) but the only real weakness in terms of compromising privacy seems to be ...


17

In one line: they have a list of all the exit nodes (something like that). more detailed: I have seen this post demonstrates how to detect a Tor connection in php function IsTorExitPoint(){ if ...


16

They know what are the TOR exit nodes addresses. So they just check your address and see if it matches with one of the exit nodes. Exit nodes are known to the whole TOR network, if you decide to run one exit node, then you should advertise it right? Or else no one will use it. Then people will know your IP is a ToR exit node. Simple.


15

Tor does not always protect your ip fully when you need to interact with the end node. You can check your efforts with online checks like this. What has worked for me on every check I've tried is JanusVM. It runs as a VM, which you use as a proxy for your hardened browser VM. Janus uses Tor, squid, dns-proxy-tor, and privoxy to cover your ip. It is very ...


15

No, because knowledge of the method is not enough to break it. You would also need to acquire information (e.g. Decryption keys), which simply cannot be obtained by an attacker. The attacker can't figure out the source IP, or look at the data. Each Tor node only "knows" the source and destination of a block of data that it is handling. It can't open it to ...


15

A VPN means your connections pass through one other server. The administrator of your network can't see anything but the fact that you're talking to that VPN server; the administrator of the computer you're ultimately connecting to generally can't see your real source address (though they can see that you're connecting from a given VPN service); but the VPN ...


14

Have you seen the Tor document on how a Tor Hidden Service works? Essentially, in the same way that it's hard to find the source of traffic from a Tor exit node, it's hard to find the server operating a Tor Hidden Service. Authorities can't shut down the server, because they can't find out where it is. The .onion TLD is not really a TLD (so there is no ...



Only top voted, non community-wiki answers of a minimum length are eligible