Questions tagged [tor]

Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis. For non-security questions about Tor, see our sister site Tor Stack Exchange.

Filter by
Sorted by
Tagged with
-1
votes
1answer
85 views

IP hiding attempts are detected [closed]

So I am using Tor and I try to log into a certain web site. It gives me a message saying that my IP address was used for spamming and does not let me log in. I think ok, probably the exit node is ...
0
votes
0answers
41 views

Can't set master password in the tor browser [migrated]

I'm using the tor browser Version 78.11.0esr in whonix 15, everything works, except that I cannot save logins in the tor browser because every time I try to setup a master password, a popup window ...
0
votes
0answers
4 views

Using external proxy and Tor-proxy on proxychains [migrated]

I'm trying to use an external proxy found on a proxylist, (it is up) as an exit after the exit node of tor, like in this config. [ProxyList] # add proxy here ... # meanwile # defaults set to "tor&...
0
votes
2answers
94 views

How are data breach lists sourced and distributed?

I understand at an elementary level how data breaches tend to be distributed, starting with friends of the attacker/discoverer and then being distributed via forums, paste bins, etc. However I was ...
2
votes
1answer
141 views

Tor for confidentiality on corporate network

I work in gov organization and recently I learned they set up a MITM, by installing some certificates - so when I visit any web site and then check the certificate info it shows the certificate ...
0
votes
1answer
99 views

Anonymous video uploading on an internet host

How much video uploading could be trackable for some person who uses the Tor Browser for uploading video on YouTube or other video hosting services with low authorization and sign-up processing, like ...
2
votes
0answers
134 views

How to harden portable Tor Browser installation (SELinux, sandbox)?

tldr How can I define a SELinux policy, that limits filesystem access of portable Tor Browser to its installation directory, say /home/user/.local/opt/tor-browser_en-US? How might Tor Browser be ...
0
votes
1answer
125 views

Torrent sites on the onion network being served over http

I've noticed that torrent websites like the Pirate Bay are served over http. This means that when using a network like the Tor onion network, where the first server in the response chain receives the ...
0
votes
1answer
202 views

is metasploit under whonix anonymous?

If I run an exploit like EternalBlue with Metasploit on whonix to a remote machine, do I remain anonymous? I think I do because it goes over tor but I am not sure. Am I right?
1
vote
1answer
122 views

Is saving a dark web page locally and reloading it in another browser a security risk?

Say I have Tor running and am browsing the dark web with the Tor browser. If I were to save a local copy of a web page and render it into another browser, like Chrome (with JS enabled), would I then ...
-2
votes
2answers
213 views

Is Tor Private/Secure?

I have had Tor for a bit, I do not use it that often. But I am wondering if anyone knows if it is secure. How safe are onion connections?
0
votes
0answers
102 views

Can Tor browser protect me from being found out? [duplicate]

I am using my computer, but am connected to my work's WiFi. Can my company see what websites I visit when am using Tor browser?
-1
votes
1answer
186 views

What’s the point in using proxychains for an nmap scan when you could use Tor?

I always hear on YouTube and other places on the internet that Tor is the best option to stay anonymous. Tor is used by many activists, journalists etc. hiding from oppressive governments and so on. ...
0
votes
1answer
90 views

Person tried to login in my website with non-existent username, but not a VPN nor Tor

I am managing a WordPress website. I have installed the plugin "Limit Login Attempts Reloaded". This plugin sent me an email saying that A.B.C.D has tried to login with the non-existent ...
0
votes
0answers
46 views

Surfed Darkweb carelessly [duplicate]

A while ago, I installed Tor app on my android (fully updated and Android 10) and with a free Vpn tried to open some sites listed on several blogs (like "best dark sites in 2020" or "...
0
votes
2answers
103 views

Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)

In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
0
votes
2answers
220 views

Staying anonymous vs a Five Eyes adversary?

If you were in a Five Eyes country and you wanted to contact someone else anonymously, without this person or the government finding out who you are or your location, how would you do it? The person ...
1
vote
1answer
131 views

Protect IP Address and location from Twitter

Is there a way to protect IP Address and location from Twitter after having logged in ? All I want Twitter to know is my email and password and nothing else. No IP Address, no location. Is that ...
0
votes
1answer
149 views

Is it safe to visit any website in TOR when the Security Bar is set at Maximum? (Safest)

Someone has sent me a link on Tor which when visited instantly read that the website itself was not available and that apparently the link is broken somehow. When using Tor i use the option "...
0
votes
0answers
34 views

tor janus vm or vpn for tcp and udp traffic

I have a hyper-v server I want to use for malware analysis. I have setup a pfsense firewall routing internal vm traffic, out through pfsense wan port. I have set firewall rules so nothing on pfsense ...
2
votes
1answer
229 views

Hiding Tor traffic to prevent deanonymization

I am trying to figure out what is the best way to hide Tor traffic in order to improve anonymity. While Tor is pretty good at hiding users’ IP addresses, its traffic stands out. This can be ...
1
vote
1answer
99 views

Can uncompressing a ZIP/tar.gz/rar/etc file execute some custom code?

So I recently downloaded Tor Browser on my Linux machine and what immediately caught my eye is the fact that after uncompressing the file (I think it was .tar.gz, but the question applies to every ...
0
votes
1answer
254 views

Hiding ip address when using coinomi wallet

How do I hide my ip address if I use a wallet as coinomi? Do I have to use Orbot? If yes, what exactly should I do? (I'm using it from an android) I just want to have privacy when I log into the ...
0
votes
0answers
225 views

MiTM attack on a Tor V3 Onion Service?

As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
0
votes
3answers
348 views

How Does Tor Prevent the Exit Node from Seeing the IP of a Tor Website

Usually the anonimity aspect of Tor is explained from the client point of view. The entry node can know who you are but cannot know which website you're accessing, and the exit node cannot know who ...
1
vote
1answer
271 views

Preserving anonymity with ring 0 malware infected PC

I am attempting to determine whether it would be possible to maintain your anonymity while using an internet-connected PC infected with ring 0 malware. The threat model assumes the adversary is ...
2
votes
1answer
597 views

Why does Tor browser use POST method for DuckDuckGo?

I noticed that the default behavior of Tor browser is to use POST method for all DuckDuckGo searches even when that's not the default DuckDuckGo setting. At first I thought it'd be to protect the ...
1
vote
1answer
86 views

Is there a reasonable chance of a well-funded agent obtaining raw traffic over Tor circuits

If an agent has a few middle Tor relays (Am) and a few exit Tor relays (Ae), could they obtain the original traffic of some of the circuits with a reasonable probability? Let's assume, without too ...
0
votes
0answers
74 views

Visual Studio Code on Linux - Privacy risk? [duplicate]

I'm a fan of Visual Studio, and recently installed VSC on my Linux Mint. However recently I did a deep-dive on Richard Stallman's site reading about just how evil and depraved all the big tech ...
0
votes
0answers
63 views

Force Proxychains random_chaining to use a specific proxy

I want to proxy some of my traffic through the tor network, using proxychains, but I'd also like to have random chaining enabled. I'm worried that some of the traffic would not go through tor when it ...
3
votes
2answers
513 views

Analyzing Tor traffic through Deep Packet Inspection?

I've just read about the detecting and blocking of Tor traffic by DPI but now I'm curious about analyzing the data you send over Tor and matching it with your true identity by deep-inspecting the data ...
-1
votes
1answer
652 views

how to safely open files downloaded with tor? [duplicate]

If I download a file (PDF,doc,image,video etc) with a tails/tor setup, how can I ensure the file doesn't "call home" or isnt imbedded with malware (other than looking at the hash)? Will a ...
0
votes
0answers
74 views

What can a government agency see if they control Tor nodes? [duplicate]

If I use Tails/tor on public WiFi, and a government agency is controlling /snooping nodes or uses malware to conduct a waterhole attack, what information can they gather about me?
2
votes
1answer
275 views

How anonymous would this be? [closed]

I use a laptop running tails/tor to go to a public wifi spot like a coffee shop and set up a new email account on protonmail. Then I take that laptop to a park in the middle of the night where there's ...
1
vote
0answers
18 views

Tor and MITM SSL [duplicate]

In my company they have MITM/SSL in following way. There is a proxy to whom all PCs connect. Now the company installed some trusted certificate authority (e.g. ISSUER-COMPANY-NAME) on our computers. ...
0
votes
2answers
107 views

Is it possible to create a hardware 'Plug and Play' TOR proxy?

Is there a way to use a device like a raspberrypi to create a kind of 'Plug and Play' TOR proxy? Ideally, a device would exist with an ethernet port as input and ethernet cable or USB as output which ...
0
votes
1answer
165 views

What can people do about Tor's weaknesses?

I read Tor's Wikipedia page and found out it has 12 weaknesses. What can people or The Tor Project do about those weaknesses? If they don't anything about it, wouldn't it compromise Tor users' ...
1
vote
1answer
357 views

How to configure VPN + Tor + linux as a proxy server? [closed]

Goal To hide the IP address using Tor, which goes through a proxy server to make HTTP/FTP requests look like they came from a regular user, not one who uses Tor. Example A user requests the website. ...
0
votes
0answers
123 views

Reverse shell from backdoor - exposing attacker? [duplicate]

If an attacker successfully installed a backdoor that connects to his computer via a reverse shell, how can the attacker hide his IP address? I'd guess he can't use Tor or a VPN, because packet ...
8
votes
2answers
664 views

How can malware discover the real IP of a TAILS user?

The FBI recently used a 0day exploit to hack a TAILS user and expose their real IP. I am interested in how they could have managed to obtain the user's real public IP after compromising the machine. ...
2
votes
1answer
145 views

How does Tor preserve anonymity if it uses normal Internet Routing?

I'm studying Tor and Onion Routing and I don't understand how it preserves anonymity if the Internet routing is still done using public ip addresses. Let's suppose we have the following Tor circuit: ...
2
votes
1answer
146 views

Seems my CNAMEs got “curled”. Somebody please explain this to me

According to my CloudFlare firewall logs, somebody went through each of my subdomains. My website is not advertised, it doesn't even show on Google unless typing the exact domain name into it. I think ...
1
vote
1answer
118 views

Which approach is technically more effective to hinder user tracking - fingerprint generalization or randomization?

Tor's approach to countering fingerprinting is to make as many users "appear the same" as possible. Let us call this "generalization". While Brave tries to randomize all fingerprints of each and every ...
0
votes
0answers
74 views

TAILS anonymous filesharing

I performed some research on filesharing and anonimity, but it turns out anything I read is not about what I need. Most articles and forums recommend not to use services like Google Drive or Dropbox, ...
-1
votes
1answer
371 views

How many proxy_len is good in proxychains?

How many chains are the best? chain_len = ? I read somewhere at tor browser, that more than 4 is not good so I guess it applies the same to proxychains? the default setting is chain_len = 2.
8
votes
2answers
628 views

Can DeepCorr's correlation technique de-anonymize all Tor users?

https://people.cs.umass.edu/~amir/papers/CCS18-DeepCorr.pdf https://www.youtube.com/watch?v=_OKLtKgEn4k I have some questions about this "Deepcorr". Does "DeepCorr" really work that good? They say ...
0
votes
1answer
278 views

Can global adversaries 'de-anonymize' any Tor user in a day?

Tor traffic correlation attacks by global adversaries I know what traffic correlation attack is but I find it hard to understand this article or how it got to its conclusions about 'de-anonymize' '...
0
votes
1answer
118 views

Remote working. Is my employer able to monitor my activity

Due to situation, my employer made a work-from-home policy. And remote administration tool is not installed, since I did clean installation of the system. Is my employer able to see my activity? ...
12
votes
2answers
1k views

How does Tor maintain anonymity when a source and destination are required at the end? [duplicate]

I had a question about Tor and the anonymity status of a fully decrypted packet that leaves a Tor exit node. My high-level understanding is that prior to a packet traversing the Tor network, a Tor ...
3
votes
2answers
313 views

Is it possible to spy on Tor browser within local network?

Imagine yourself connecting your personal device to your workplace wi-fi network. Can managers, network administrators, or some other person/potential attacker see my browser's activity if I'm using ...

1
2 3 4 5
10