Tag Info

New answers tagged

3

Yes, you need to start from somewhere to ask about where nodes are, but that doesn't mean you have to use one of the ones that are in the provided list. You can use whatever node you trust. Every distributed system requires asking for other systems that are part of the network, otherwise you would just have to try IPs at random until you found someone ...


3

The image below shows how a packet is encrypted, and sent through the network. Tor uses its own protocol to negotiate encryption keys. Through this protocol the client receives encryption keys for Routers A, B and C. From the Tor Project The client negotiates a separate set of encryption keys for each hop along the circuit to ensure that each ...


-1

Flash operates on a level that does not respect the proxy rules set by the browser. It runs seperately and the player is able to open connections to other hosts without using the proxy hints of the browser.


0

Watching videos using Flash is hazardous to your Tor security because 1) Flash can access servers directly rather than going through Tor, and 2) Flash has more holes than a block of Swiss cheese. Listening to audio has the same risks: if your audio player ignores Tor and connects directly to the SHOUTcast server, it can reveal your IP address; if it has ...


1

First you look at the ingress part of the data. Fundamentally you put whatever sticks into the stream. Like modifying cookies or layer 6/7 session header injection. Later, you look at the egress packets. It doesn't matter that the connections are over an opaque cloud. In fact, i think one can correlate the outgoing sets of packets from the origin host to ...


0

Yes although not ideal, you can use obfuscated bridges to hide the fact that you're using tor from your ISP, although there are more things you must do to prevent them from recognizing the traffic when they do deep packet inspection and you can use tor as system wide proxy with software such a proxychains, you can also manually configure services or ...


0

Well for the best anonymity in my opinion, I'd go with using obfuscated bridges with Tor ->VPN->Tor(or i2p)->virtual machine VPN chain linking using Whonix then Tails. The reason for this is that Whonix virtualizes the gateway, so as to prevent your IP from being compromised by the workstation for whatever reason (malware installed through a browser attack ...


0

In order to provide a service like (and actually have it be commercially used) there needs to be participation between multiple parties. The only way I can see this working is if there is a centralized key server that would act as the "Bob" and "Alice" of the equation. If you want to secure yourself from metadata revealing location and any forensic pattern ...


2

Tor is connection between normal end peers. Most of them give some revdns data, although it is not very informal and autogenerated (for example, 43.72.dyn.myprovider.com). Sometimes there is no revdns set up. But: it is totally independent if the end users are using tor, or not. It depends from the revdns settings of their network provider. Tor has nothing ...


4

When you are browsing TOR hidden services, the TOR system already provides end-to-end encryption, so another TLS layer is redundant. It is in fact counter-productive, because one of the goals of TLS is to de-anonymize the server. It makes no sense to go through the trouble to set up a hidden service and then get a certificate from a certificate authority ...


1

In general, if you can't trust the computer that you are using, you should expect no privacy whatsoever. Just as Tor cannot protect you against someone looking over your shoulder at your screen, it cannot protect you against an administrator viewing through Remote Desktop, or the "commercial spyware" programs that many institutions install on their computers ...


1

If someone else has software installed on the computer you are using that allows them to view your screen than Tor will not prevent them from doing so. If used correctly Tor will make it very difficult to associate your internet traffic with you and people snooping on that traffic will not know you are the one it is directed to. But, if an attacker has ...


8

"Analysis": The fact that actual login attempts were made, tells you that the attacker was able to set up connections to the mail host . Since, in order to receive information over the Internet, you must be in control of the IP address you are using, this cannot be a case of address spoofing. (Attackers may send you information using spoofed addresses, as ...


6

It may be a Botnet with many different Computers in different countries. It has the advantage (for the hacker) that it is almost impossible to block for you (or your mail provider) because there is no IP that can be blocked. I don't know you, or your mail account, but if it is a normal account without important information in it there is a big chance that ...


26

TOR, VPN, bots, proxies, you name it.. The source IP is not "spoofed" per se... it's the real deal. If someone really spoofed a source IP, they couldn't establish a TCP connection or receive any replies. The source IP spoofing method is more useful over UDP when launching an amplification attack to a victim/spoofed IP.


3

See I want to ban the Tor network from my service from the official Tor documentation. The Tor project provides a list with IPs of all the exit nodes that can access your service, use query string parameters to tell it the IP and port of your service, example : https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=8.8.8.8&port=443. You can then ...


0

While not a complete solution, with the tour browser bundle running, on a Linux system, you can invoke command line utilities proceeded by the command "torsocks" to make the command argument go through the all ready running tor demon. Be careful though. As other posters have said, a distro like Tails, or encapsulating everything in a VM forced to go through ...


0

Normally educational networks use webfilters. And to keep the network bandwith at normal rate ,it should be blocked


0

If you are interested in obfuscation techniques between yourself and the Tor network I would suggest you look at the pluggable transports "extensions": https://www.torproject.org/docs/pluggable-transports.html.en


0

Running those programs themselves would be pretty safe if they really need to run as root (I'm sure they can be ran as a normal user with the correct configuration). What is definitely not secure is being logged in as root and running everything else as root, like a desktop environment or a web browser.


2

Your college would be able to know that you used Tor and can fairly easily block Tor if they wanted to. But what data goes through the Tor network is most likely out of bound for them. If your college runs a Tor exit node, and by chance Tor happen to pick the college's exit node, it is possible that they could do some sort of timing attack. But mounting ...


1

The short answer is that any internet connection you access that is also tied to you personally (e.g. the login credentials on a college network) can be traced back to you. Therefore it is not suitable for full anonymity online. You enter your login credentials to access the network, the network admins can trace your connections through their network to a ...


0

Speaking as someone who's set up such a system, my recommendation is that you simply use the Tails distro, possibly in a virtualized environment. It's much easier, and the Tails developers have already put in the effort of looking for ways that data can leak. If you want to set things up yourself, study Tails and see how it handles things. You'll ...


0

One of the easiest ways to do this, is through the use of visualization. Where your Host machine runs the TOR client, and starts the virtual environment. Details of this on the tor.stackexchange.com Example post : Running a virtual machine (VM) that can only connect through Tor This allows you to run apps and sessions inside your virtual environment just ...


1

Those applications need low level access to the network (at sockets level) in order to be able to craft special packets so they won't work with tor and proxychains. You might be able to use some configurations like nmap tcp connect scan ( -sT ) since it sends normal tcp packets and not just the syn as in the stealth scan.



Top 50 recent answers are included