Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [tor]

Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

2
votes
1answer
55 views

Can a VPN server be traced through Tor?

I was wondering that if my data was intercepted by Tor by an exit node, would they be able to see which VPN server is being used to encrypt the data. I am asking because I planned on making an OpenVPN ...
0
votes
0answers
9 views

TOR How does middle node know which chain a packet belongs to? [migrated]

"Tor works like a chain of proxies, where each proxy only knows about the next hop and the previous hop." I presume that a TOR node may be part of more than one circuit though, how does it know which ...
-1
votes
1answer
35 views

Routing through Tails OS

Is it possible to route all my traffic of Kali Linux through a virtual machine or laptop that is using Tails OS in the same network? This question is related to anonymity I guess someone can help me ...
-2
votes
1answer
66 views

What is a Tor relay?

A tor relay is the same as a node inside the tor network? How many types of this relay exist? I found three types: middle relays, exit relays, and bridges. I don't know what they do and why exist this ...
0
votes
0answers
53 views

Tor browsing history - if someone has physical access to my laptop can they see my tor browsing history?

I use a remote hard drive to browse tor on a windows ten laptop. I am going overseas soon and might need to take my laptop. I am concerned that customs agents for my entry/exit countries might take my ...
0
votes
0answers
46 views

Tor and Brave Browser odd javascript issue?

I've noticed that on https://javatester.org/javascript.html, https://www.enable-javascript.com, and https://www.perfect-privacy.com/check-ip/ it shows that javascript is enabled however, no script is ...
2
votes
1answer
126 views

Will this setup give better anonymity and hide tor usage?

Computer 1 with IP 1 (traceable to owner) connects remotely to Computer 2 with IP 2 in another country (assume computer 2 and IP2 cannot be traced back to original owner - bought using cash/bitcoin). ...
1
vote
2answers
139 views

Is this a viable defense against correlation attacks?

So, I guess most of you know that the true identity can be revealed if somebody controls the entry and the exit node of your Tor-connection. Let´s say I´m connecting first to an encrypted VPN Server ...
1
vote
1answer
202 views

Can anyone using my wifi see what I'm browsing?

Can anyone using my wifi see what I'm browsing? I've already read questions and answers about this topic and everybody suggests to use VPN. I have two questions: is Tor safe for this issue? If I ...
1
vote
2answers
117 views

Why IPv6 showing on whatismyip.com?

I use Tor Browser on Whonix. Why I see IPv6 (something like 3221:23f9:c:67h:0:0:0:3) on whatismyip.com? Is that website can see my MAC Address?
2
votes
1answer
148 views

Do real-name email adresses hurt the anonymity provided by torbirdy?

Scenario: Someone uses thunderbird to manage her various email addresses. All of those contain her real name (work, university, ...). One day, she has need of an anonymous email account and so creates ...
0
votes
1answer
56 views

Netcat does not receive an response over tor

I configured Tor Hidden Service to forward from port 5400 to 127.0.0.1:1234. Then i restared tor and I got hostname. Now I run nc -l 1234 and i visit the website and I receive a GET request. Now I ...
0
votes
1answer
39 views

Tor website as proxy like receiving server

I want to create a anonymous application that will send data all the time to my server. I don't want my ip to be exposed so I wanted to use Tor. I wanted to send sniffed packets to this server and ...
1
vote
2answers
148 views

How does Cloudflare track their client? Tor is not a workaround

I mirrored a ecommerce site using wget. This site seems to use Cloudflare to handle their web traffic. What's interesting is that after 90 % or so of the mirroring was done, wget started to produce/...
0
votes
1answer
62 views

How would an attacker know what version of tor/TAILS I'm using?

Everytime a new version of TAILS comes out, it's recommended to download and install immediately because of known vulnerabilities with the last one. Since no relay except the middle relay knows the ...
0
votes
1answer
144 views

At which point does an exploit against TAILS happen?

Since TAILS by default disallows root/superuser privileges and since traffic is sent encrypted with each relay removing a layer until the exit node, at what point is an exploit on a version of TAILS ...
0
votes
1answer
110 views

what attacks are possible on outdated versions of TAILS?

I know using outdated software is a bad idea, but until recently I have only been able to boot TAILS from LiveCDs that come with some Linux magazines. Since these arrive in my country late, I end up ...
1
vote
0answers
42 views

Sudden spike in received traffic when connecting to the Tor Network [closed]

Recently when using Tails, I've noticed that the traffic suddenly jumps to over 1TB when establishing a conenction to the Tor network after booting. It doesn't show up in Total Received and also, for ...
2
votes
1answer
461 views

Why is the data from a Tor exit node not encrypted?

Tor works in such a way that the data is encrypted by the three nodes. I.e., the entry node, relay and the exit node. But why is it not encrypted from the exit node to the destination server? Is this ...
-2
votes
1answer
124 views

why certification authority?

As I understand it, CAs have the job to make sure that the encryption via a passphrase used when visiting a website (https://) stems from the website itself and nobody else. Or that if I exchange ...
2
votes
2answers
203 views

Revealing IP of an email recipient using remote PHP script or pixel tracking

I read through the search items and similar threads but my query is rather specific. I know it's possible to reveal IP of an email recipient if we can get the person to click on an attached image or ...
3
votes
1answer
145 views

How anonymous is it to use Facebook's Tor-site?

How anonymous, with respect to Facebook, not the rest of the world, is it to use Facebook via https://www.facebookcorewwwi.onion/ rather than the usual site? That is, if two different Facebook users ...
0
votes
1answer
106 views

Are VPN users identifiable by matching their connection to the VPN server?

Given a nation-state has full access to the logs of the ISPs operating on its territory and given it knows that a certain activity has been conducted by a user from its territory, can they do the ...
3
votes
0answers
39 views

Did Freedom System 2.0 used to provide privacy and pseudonimity via onion routing?

I have been reading a paper known as "Freedom System 2.0 Architecture" where a user's IP traffic is being transferred between a path of Freedom Server Nodes before reaching to its end destination. It ...
1
vote
1answer
307 views

Tor “Security Slider” - What security does it provide?

When opening up Tor Browser for the first time I am notified of the existence of the Security Slider. The docs explain what each security level does in terms of functionality. I haven't found a solid ...
2
votes
1answer
298 views

How to route internet traffic through google

I'm in a situation which my network provider blocks all my internet access except for google and its branches (drive , gmail ,etc...). I'm looking for a way to route my traffic through google (with a ...
8
votes
1answer
264 views

How to obtain privacy and authenticity with DNS?

I use pfSense (Unbound) as my local resolver. Historically I've pointed it at root recursive resolution, because I perceived my main threat as trustworthiness and recency of data (poisoned/invalid DNS)...
0
votes
2answers
125 views

Tor exit node inside the website server to prevent anything in the clear over the wire?

Here's the problem: Can you trust Tor’s exit nodes? Excerpt: Chloe set up a fake website with a Bitcoin theme, downloaded a complete list of exit nodes and then logged in to the honeypot site ...
2
votes
1answer
215 views

Tor: Is a diffie-helman key exchange being done over reciepient of traffic?

As I was looking over Tor specifications and I noticed that when a circuit is generated then on each circuit's node a Diffie-Hellman key exchange is being done over an encrypted path on each Node as ...
-4
votes
1answer
95 views

Can VPN or Tor exit nodes modify the webserver's hostname?

For example, if I go to google.com can they send back fakegoogle.com?
1
vote
1answer
228 views

Error on Proxychains + Tor

I'm trying to connect through Proxychains and nc to a website but I get this error: myip.gelma.net:23: forward host lookup failed: Unknown host Previously, I was reciving this error: |DNS-...
2
votes
3answers
259 views

Test a clearnet website for a hidden service?

Recently I did an nmap service scan against a list of domains and one of the NSE scripts running was fingerprint-strings. This script apparently extracts ASCII strings from unidentified services. ...
-1
votes
1answer
167 views

How to prevent Tails OS from accessing hard drive?

I had a question regarding the Tails OS. I just want it for some regular Tor browsing. Is it guaranteed that the hard disk is not accessible in case something goes terribly wrong? (Worst case scenario?...
0
votes
1answer
379 views

Will I be 100% secure (anonymous) when using the “regular” web through Tor? [duplicate]

If I use Tor to access "regular" internet sites, like Yelp, Amazon, and others to leave reviews, will I be I 100% anonymous? (Without changing my IP and MAC addresses?)
-1
votes
1answer
102 views

Which of these configurations is better to stay anonymous on the internet? [duplicate]

MyPC > RDP > Windows VPS > Tor > Socks5 > Internet or MyPC with Tor sandboxed > socks5 > Internet. Which is better? Any better idea that doesn’t compromise on network speed?
2
votes
2answers
1k views

What is the pitfall to connecting with Tor on a public wifi hotspot?

I often use public wifi hotspots to connect to the Internet. Is my data encrypted right before it leaves my system and so protected from network observers/snooping if I use tor?
1
vote
3answers
214 views

Do I run the risk of not being anonymous with this setup?

Basically, I created a gmail account using a VPN, and then created a tumblr associated with that Gmail also using a VPN. However, I am now realizing that tumblr records the type of device I am using ...
6
votes
2answers
343 views

How precisely can your ISP tell you are using Tor?

I often read that your ISP can tell if you are using Tor. Assuming you use a bridge the only way to do this seems to be statistical analysis of a packet capture. How exactly is this done given that ...
2
votes
1answer
345 views

Is there a simple way to withstand a Tor correlation attack?

Suppose my opponent watches the traffic between my provider and the first relay in the chain and also between the output relay and the website that I visit. Is there a simple way in this case to make ...
1
vote
1answer
115 views

Secure to run a tor bridge as current user?

It is secure to run a tor bridge node from my current user, have in mind that I can use sudo? Here is the torrc: ORPort 9001 Nickname somenick ExitRelay 0 ExitPolicy reject *:* # no exits allowed ...
-1
votes
1answer
154 views

Is my computer safe after accessing .onion sites without VPN?

After watching a youtube video about .onion sites and I got Tor and just went on one without clicking any of the links. Then I got off Tor and that was pretty much it. But I've read an article about ...
5
votes
1answer
296 views

How to Survive Iran's Internet Censorship in January 2018?

The Iranian government has harshly cracked down the Internet. Aside from denied access to many websites and services, many VPN services are disrupted. Formerly, Cisco AnyConnect Compatible VPN ...
-5
votes
2answers
407 views

Does the dark web server actually part of surface web?

The dark web is like a lair for hackers/criminals/etc. But has anyone, like FBI or CIA ever found the main server of the dark web? Where is the main server located? I thought all Internet data flows ...
5
votes
1answer
155 views

Can an attacker who has gained control over my router compromise anonymity through Tor?

If an attacker manages to infect my router with malware and sets up an entry node, can they force my computer to connect to their entry node? If my computer does connect to their entry node, can they ...
0
votes
2answers
104 views

Can be Tor Colleration Attack used in court? [closed]

Suppose I send death threats using Tor. Then, I send update again. Victim says it is me. Police checks logs on the server and at my ISP. The IP addresses do not match since I used Tor, but there's ...
0
votes
0answers
243 views

How I can protect Tails Linux from being sniffed

I use the latest Tails Linux on a virtual machine on Ubuntu to improve my security since, where I am from, navigating certain sites can offer risk. It comes with Tor Browser that I use to access the ...
2
votes
1answer
980 views

Anonymity Stack: Home connection -> VPN -> Whonix(Tor) -> Socks5. Few questions on anonymity

So let's assume the following: 1. A host machine running a clean BSD-based OS that has no backdoors, malware, spyware or other potentially de-anonymizing harmful software. 2. One home internet ...
9
votes
1answer
1k views

wget: what security issues am I not considering?

Questions: based on the details provided below, (a) what potential security vulnerabilities and threats might I face in my use of wget and (b) what recommendations would you give for mitigating those ...
3
votes
0answers
96 views

Is there a secure, anonymous peer to peer matching solution?

I am newbie so please pardon my naivete. I was wondering if there is any cryptographic procedure that allows for peer to peer matching. Perhaps to illustrate my question I will use an example. Say I ...
1
vote
1answer
121 views

Can this bug on Tails Linux/Tor Browser be unsafe?

I noticed some images only will be loaded if they are before cached. That is, if I open the browser it won't load directly. But if I first load the image individually on the browser and later I open ...