Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [tor]

Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

-1
votes
0answers
21 views

Secure operating system (qubes / tails) for everyday use [on hold]

What do you think about security in OS's like Qubes or Tails. If I would use VPN on my normal OS like Windows or standard Linux distributions then should I consider it also on Qubes or Tails? And are ...
2
votes
1answer
86 views

Will this setup give better anonymity and hide tor usage?

Computer 1 with IP 1 (traceable to owner) connects remotely to Computer 2 with IP 2 in another country (assume computer 2 and IP2 cannot be traced back to original owner - bought using cash/bitcoin). ...
1
vote
2answers
93 views

Is this a viable defense against correlation attacks?

So, I guess most of you know that the true identity can be revealed if somebody controls the entry and the exit node of your Tor-connection. Let´s say I´m connecting first to an encrypted VPN Server ...
0
votes
0answers
60 views

Parrot OS: Proxychains revealing my real IP in firefox

I am using Parrot OS. While using firefox with proxychains, I see that it is still revealing my real IP address, on the contrary, when I am using terminal stuff like, curl ipinfo.io, my IP is ...
0
votes
0answers
6 views

Can't update/use Whonix distribution [migrated]

When trying to start "Whonix Gateway" first time, after few starting steps it runs whonixsetup which checks if Whonix is configured successfully within Tor, but it fails with Warning: So, as ...
1
vote
1answer
167 views

Can anyone using my wifi see what I'm browsing?

Can anyone using my wifi see what I'm browsing? I've already read questions and answers about this topic and everybody suggests to use VPN. I have two questions: is Tor safe for this issue? If I ...
0
votes
0answers
37 views

Running Hydra Over Tor

How is it possible to test a deepnet post form with hydra? or any other network login bruter... I'm just getting a 'socks5 error cannot connect'. I've set the HYDRA_PROXY variable to socks5://127.0.0....
1
vote
2answers
100 views

Why IPv6 showing on whatismyip.com?

I use Tor Browser on Whonix. Why I see IPv6 (something like 3221:23f9:c:67h:0:0:0:3) on whatismyip.com? Is that website can see my MAC Address?
2
votes
1answer
133 views

Do real-name email adresses hurt the anonymity provided by torbirdy?

Scenario: Someone uses thunderbird to manage her various email addresses. All of those contain her real name (work, university, ...). One day, she has need of an anonymous email account and so creates ...
0
votes
1answer
52 views

Netcat does not receive an response over tor

I configured Tor Hidden Service to forward from port 5400 to 127.0.0.1:1234. Then i restared tor and I got hostname. Now I run nc -l 1234 and i visit the website and I receive a GET request. Now I ...
0
votes
1answer
34 views

Tor website as proxy like receiving server

I want to create a anonymous application that will send data all the time to my server. I don't want my ip to be exposed so I wanted to use Tor. I wanted to send sniffed packets to this server and ...
1
vote
2answers
118 views

How does Cloudflare track their client? Tor is not a workaround

I mirrored a ecommerce site using wget. This site seems to use Cloudflare to handle their web traffic. What's interesting is that after 90 % or so of the mirroring was done, wget started to produce/...
0
votes
1answer
56 views

How would an attacker know what version of tor/TAILS I'm using?

Everytime a new version of TAILS comes out, it's recommended to download and install immediately because of known vulnerabilities with the last one. Since no relay except the middle relay knows the ...
0
votes
1answer
79 views

At which point does an exploit against TAILS happen?

Since TAILS by default disallows root/superuser privileges and since traffic is sent encrypted with each relay removing a layer until the exit node, at what point is an exploit on a version of TAILS ...
0
votes
1answer
92 views

what attacks are possible on outdated versions of TAILS?

I know using outdated software is a bad idea, but until recently I have only been able to boot TAILS from LiveCDs that come with some Linux magazines. Since these arrive in my country late, I end up ...
1
vote
0answers
39 views

Sudden spike in received traffic when connecting to the Tor Network [closed]

Recently when using Tails, I've noticed that the traffic suddenly jumps to over 1TB when establishing a conenction to the Tor network after booting. It doesn't show up in Total Received and also, for ...
2
votes
1answer
418 views

Why is the data from a Tor exit node not encrypted?

Tor works in such a way that the data is encrypted by the three nodes. I.e., the entry node, relay and the exit node. But why is it not encrypted from the exit node to the destination server? Is this ...
-2
votes
1answer
116 views

why certification authority?

As I understand it, CAs have the job to make sure that the encryption via a passphrase used when visiting a website (https://) stems from the website itself and nobody else. Or that if I exchange ...
2
votes
2answers
149 views

Revealing IP of an email recipient using remote PHP script or pixel tracking

I read through the search items and similar threads but my query is rather specific. I know it's possible to reveal IP of an email recipient if we can get the person to click on an attached image or ...
3
votes
1answer
137 views

How anonymous is it to use Facebook's Tor-site?

How anonymous, with respect to Facebook, not the rest of the world, is it to use Facebook via https://www.facebookcorewwwi.onion/ rather than the usual site? That is, if two different Facebook users ...
0
votes
1answer
97 views

Are VPN users identifiable by matching their connection to the VPN server?

Given a nation-state has full access to the logs of the ISPs operating on its territory and given it knows that a certain activity has been conducted by a user from its territory, can they do the ...
3
votes
0answers
36 views

Did Freedom System 2.0 used to provide privacy and pseudonimity via onion routing?

I have been reading a paper known as "Freedom System 2.0 Architecture" where a user's IP traffic is being transferred between a path of Freedom Server Nodes before reaching to its end destination. It ...
1
vote
1answer
224 views

Tor “Security Slider” - What security does it provide?

When opening up Tor Browser for the first time I am notified of the existence of the Security Slider. The docs explain what each security level does in terms of functionality. I haven't found a solid ...
2
votes
1answer
249 views

How to route internet traffic through google

I'm in a situation which my network provider blocks all my internet access except for google and its branches (drive , gmail ,etc...). I'm looking for a way to route my traffic through google (with a ...
8
votes
1answer
219 views

How to obtain privacy and authenticity with DNS?

I use pfSense (Unbound) as my local resolver. Historically I've pointed it at root recursive resolution, because I perceived my main threat as trustworthiness and recency of data (poisoned/invalid DNS)...
0
votes
2answers
110 views

Tor exit node inside the website server to prevent anything in the clear over the wire?

Here's the problem: Can you trust Tor’s exit nodes? Excerpt: Chloe set up a fake website with a Bitcoin theme, downloaded a complete list of exit nodes and then logged in to the honeypot site ...
2
votes
1answer
149 views

Tor: Is a diffie-helman key exchange being done over reciepient of traffic?

As I was looking over Tor specifications and I noticed that when a circuit is generated then on each circuit's node a Diffie-Hellman key exchange is being done over an encrypted path on each Node as ...
-4
votes
1answer
94 views

Can VPN or Tor exit nodes modify the webserver's hostname?

For example, if I go to google.com can they send back fakegoogle.com?
1
vote
1answer
187 views

Error on Proxychains + Tor

I'm trying to connect through Proxychains and nc to a website but I get this error: myip.gelma.net:23: forward host lookup failed: Unknown host Previously, I was reciving this error: |DNS-...
2
votes
3answers
237 views

Test a clearnet website for a hidden service?

Recently I did an nmap service scan against a list of domains and one of the NSE scripts running was fingerprint-strings. This script apparently extracts ASCII strings from unidentified services. ...
-1
votes
1answer
150 views

How to prevent Tails OS from accessing hard drive?

I had a question regarding the Tails OS. I just want it for some regular Tor browsing. Is it guaranteed that the hard disk is not accessible in case something goes terribly wrong? (Worst case scenario?...
0
votes
1answer
243 views

Will I be 100% secure (anonymous) when using the “regular” web through Tor? [duplicate]

If I use Tor to access "regular" internet sites, like Yelp, Amazon, and others to leave reviews, will I be I 100% anonymous? (Without changing my IP and MAC addresses?)
-1
votes
1answer
91 views

Which of these configurations is better to stay anonymous on the internet? [duplicate]

MyPC > RDP > Windows VPS > Tor > Socks5 > Internet or MyPC with Tor sandboxed > socks5 > Internet. Which is better? Any better idea that doesn’t compromise on network speed?
2
votes
2answers
905 views

What is the pitfall to connecting with Tor on a public wifi hotspot?

I often use public wifi hotspots to connect to the Internet. Is my data encrypted right before it leaves my system and so protected from network observers/snooping if I use tor?
1
vote
3answers
195 views

Do I run the risk of not being anonymous with this setup?

Basically, I created a gmail account using a VPN, and then created a tumblr associated with that Gmail also using a VPN. However, I am now realizing that tumblr records the type of device I am using ...
6
votes
2answers
329 views

How precisely can your ISP tell you are using Tor?

I often read that your ISP can tell if you are using Tor. Assuming you use a bridge the only way to do this seems to be statistical analysis of a packet capture. How exactly is this done given that ...
2
votes
1answer
290 views

Is there a simple way to withstand a Tor correlation attack?

Suppose my opponent watches the traffic between my provider and the first relay in the chain and also between the output relay and the website that I visit. Is there a simple way in this case to make ...
1
vote
1answer
105 views

Secure to run a tor bridge as current user?

It is secure to run a tor bridge node from my current user, have in mind that I can use sudo? Here is the torrc: ORPort 9001 Nickname somenick ExitRelay 0 ExitPolicy reject *:* # no exits allowed ...
-1
votes
1answer
142 views

Is my computer safe after accessing .onion sites without VPN?

After watching a youtube video about .onion sites and I got Tor and just went on one without clicking any of the links. Then I got off Tor and that was pretty much it. But I've read an article about ...
5
votes
1answer
274 views

How to Survive Iran's Internet Censorship in January 2018?

The Iranian government has harshly cracked down the Internet. Aside from denied access to many websites and services, many VPN services are disrupted. Formerly, Cisco AnyConnect Compatible VPN ...
-5
votes
2answers
343 views

Does the dark web server actually part of surface web?

The dark web is like a lair for hackers/criminals/etc. But has anyone, like FBI or CIA ever found the main server of the dark web? Where is the main server located? I thought all Internet data flows ...
3
votes
1answer
143 views

Can an attacker who has gained control over my router compromise anonymity through Tor?

If an attacker manages to infect my router with malware and sets up an entry node, can they force my computer to connect to their entry node? If my computer does connect to their entry node, can they ...
0
votes
2answers
102 views

Can be Tor Colleration Attack used in court? [closed]

Suppose I send death threats using Tor. Then, I send update again. Victim says it is me. Police checks logs on the server and at my ISP. The IP addresses do not match since I used Tor, but there's ...
0
votes
0answers
232 views

How I can protect Tails Linux from being sniffed

I use the latest Tails Linux on a virtual machine on Ubuntu to improve my security since, where I am from, navigating certain sites can offer risk. It comes with Tor Browser that I use to access the ...
2
votes
1answer
820 views

Anonymity Stack: Home connection -> VPN -> Whonix(Tor) -> Socks5. Few questions on anonymity

So let's assume the following: 1. A host machine running a clean BSD-based OS that has no backdoors, malware, spyware or other potentially de-anonymizing harmful software. 2. One home internet ...
9
votes
1answer
805 views

wget: what security issues am I not considering?

Questions: based on the details provided below, (a) what potential security vulnerabilities and threats might I face in my use of wget and (b) what recommendations would you give for mitigating those ...
3
votes
0answers
96 views

Is there a secure, anonymous peer to peer matching solution?

I am newbie so please pardon my naivete. I was wondering if there is any cryptographic procedure that allows for peer to peer matching. Perhaps to illustrate my question I will use an example. Say I ...
1
vote
1answer
114 views

Can this bug on Tails Linux/Tor Browser be unsafe?

I noticed some images only will be loaded if they are before cached. That is, if I open the browser it won't load directly. But if I first load the image individually on the browser and later I open ...
3
votes
2answers
100 views

SSL for external micro-services for Tor hidden service

I building a Tor hidden service for educational purposes, and I'm trying to make it as secure as I can. The main app is in Rails, and I'll communicate with multiple micro-services. Due to bandwidth ...
1
vote
1answer
151 views

Can correlation attacks (end-to-end confirmation) be used as a defense?

Just speculating here. So just like timing and data sizes are used to correlate from end to end on a Tor network to deanonymize a user, can the same method be used on a single device to monitor and ...