Questions tagged [tor]
Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis. For non-security questions about Tor, see our sister site Tor Stack Exchange.
527
questions
1
vote
1
answer
232
views
Security of host computer and network with Tor
I'm considering running a Tor (non-exit) relay on my personal Ubuntu 14.04 computer at home (which also has my personal data on it).
I wanted to know if I should have any concerns about the security ...
CommunityBot
- 1
0
votes
0
answers
120
views
Why is my browser fingerprint unique when running a fresh TOR browser installation?
Downloaded a fresh tor browser instance to test if the fingerprint is unique. (Signature was verified)
https://amiunique.org says that the browser fingerprint is unique
https://coveryourtracks.eff.org/...
- 173
2
votes
3
answers
1k
views
Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?
Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?
If not then is there any way to visit a malicious ...
CommunityBot
- 1
1
vote
1
answer
523
views
Anonymous video uploading on an internet host
How much video uploading could be trackable for some person who uses the Tor Browser for uploading video on YouTube or other video hosting services with low authorization and sign-up processing, like ...
CommunityBot
- 1
0
votes
1
answer
2k
views
Whonix with Remmina to Connect on RDP - Is it safe?
I do not want my ISP logging any of my data, and do not trust my VPN either. Is it a safe measure to use Whonix in a VirtualBox, connecting over VPN, then using remmina to connect to an RDP? My goal ...
CommunityBot
- 1
3
votes
1
answer
244
views
Do VPNs log and analyze OCSP requests?
I am a privacy-conscious user currently living in Russia where the Internet is censored and monitored by the Russian state. Russian ISPs are legally required to log and store all users’ Internet ...
CommunityBot
- 1
5
votes
2
answers
4k
views
Encryption key exchange for Tor
I've been studying how Tor works - including the great QA "Why can a Tor exit node decrypt data, but not the entry node?".
I understand the concept of onion routing and multiple layers of encryption....
- 509
1
vote
0
answers
219
views
How to diagnose a DDOS on a home network?
I'm a user with a consumer level modem and a plain wifi router.
I have been seeing activity where for long periods of time over night, my internet connection will shut off for 10-20 minutes at a time. ...
- 202
1
vote
1
answer
218
views
Does the first node in the circuit connecting the hidden service to the introduction point know the server's IP address?
I am doing research about the dark web. However I find it hard to understand how Tor hidden services work. The whole point of it is to actually anonymize the server from the client so that the client ...
CommunityBot
- 1
0
votes
2
answers
560
views
What is the difference between a VPN and a Tor Socks proxy on public wifi?
I seek protection against MITM & snooping of VPN or Tor proxy traffic on public WiFi.
So, what are the different security impacts of each of these 2 solutions:
Using a VPN (like Proton VPN) to ...
- 50.3k
1
vote
1
answer
2k
views
Is Anonymized DNSCrypt over Tor a better alternative to having Doh+ECH?
I use dnscrypt-proxy's anonymized DNScrypt with multiple relays, force it all to use TCP, route them over Tor.
Does this prevent my ISP or anyone in my country to see my DNS queries and client hellos ...
- 132k
2
votes
4
answers
213
views
How do you rate limit bruteforce attempts on a Tor hidden service?
I'm considering the feasibility of a .onion domain for my website to cater to privacy conscious users.
Actions that occur before there's a known UserID (eg. login page) need to have a bounded number ...
- 1,701
0
votes
0
answers
145
views
These two pgp public keys are the same but different?
I'm doing some research on .onion websites and was trying to verify an onion URL.
I got a public key from two different sources: side by side they are identical until about ten lines before the end. ...
- 132k
0
votes
0
answers
81
views
Deploying a site with zero-knowledge?
Any methodologies of secret or private dev-ops as a service?
The use-case I was thinking of is for example, a productized service like on Fiverr, eg. Seller will deploy your site onto TOR network and ...
- 113
-1
votes
2
answers
4k
views
Tor relay on port 9001 TCP
I executed netstat -t on my linux terminal and noticied a tor relay running on port 9001. I've search about the IP address of relay on shodan and got a result that address is from Russia, after that i ...
- 171
0
votes
3
answers
3k
views
What’s the point in using proxychains for an nmap scan when you could use Tor?
I always hear on YouTube and other places on the internet that Tor is the best option to stay anonymous. Tor is used by many activists, journalists etc. hiding from oppressive governments and so on. ...
CommunityBot
- 1
0
votes
2
answers
352
views
Any tool that can prevent ISP from knowing which websites we visit? beside tor?
Any tool that can prevent ISP from knowing which websites we visit? beside tor? while https can help, but still ISP knows which domains/websites we visit. There is no way around it?
Also believe that ...
CommunityBot
- 1
0
votes
1
answer
246
views
Is a tor packet readily identifiable?
if an exit node decides to trace back a Tor message to its source, will it be able to identify the same packet at the middle node, and from then identify the same packet at the entry node? assuming ...
CommunityBot
- 1
0
votes
1
answer
145
views
Is exposing a bind shell to tor dangerous?
I have a bind shell written in python:
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.bind(("127.0.0.1", "710"))
s.listen(1)
conn, addr = s.accept()
print(f"[*] ...
- 9,033
6
votes
3
answers
4k
views
How precisely can your ISP tell you are using Tor?
I often read that your ISP can tell if you are using Tor. Assuming you use a bridge the only way to do this seems to be statistical analysis of a packet capture. How exactly is this done given that ...
- 23.9k
5
votes
2
answers
12k
views
How well Tor protects against fingerprinting?
I don't want certain websites to track me, but they don't work without js. I found a few plugins that all require "reading and changing all data on all websites", so I needed something else. I was ...
17
votes
2
answers
7k
views
Is Tor over VPN a security risk?
In his talk about OPSEC, The Grugq stresses that you first have to go through TOR before connecting to a VPN. Otherwise, the VPN would be a direct link from the endpoint to you. He summarizes:
TOR ...
- 1,019
0
votes
0
answers
184
views
Impact of Deep Learning Based Flow Correlation on Tor
It's been known ever since Tor existed that flow correlation attacks can break Tor's anonymity, but whereas in the past flow correlation attacks had a false positive rate far too high to be useful ...
- 1
2
votes
2
answers
227
views
Tor: is a relay cell's header also onion-encrypted?
I am puzzled by the question if not only the data, but also the header of a relay cell in Tor is onion-encrypted.
I understand that when an OR receives an outbound relay cell and peels off one layer ...
CommunityBot
- 1
3
votes
0
answers
132
views
Can botnets/malicious traffic be effectively reduced on my exit nodes?
I host a small collection of TOR exit nodes to the clear net. Believe it or not, the number one complaint I get in my inbox is not due to illegal materials coming through the nodes (of which I have ...
- 202
8
votes
1
answer
208
views
Anonymity in initial Key exchange in onion routing
Maybe I will be wrong, please correct me and at the same time answer my question. I know the keys are exchanged between client and Tor relays through circuit extension requests (other than first relay)...
- 132k
1
vote
0
answers
1k
views
What are the risks of running SSH over Tor?
Goal
The intention is to set up an SSH entrance which is more secure (or at least more obfuscated) than a default setup with Port Forwarding or VPN.
Previous research and context
TL;DR, see question ...
- 11
11
votes
1
answer
4k
views
Meterpreter (Metasploit) anonymous reverse connection over Tor2web
The general consensus seems to be that one sets up a listener on a server accessible by a public IP and some port forwarding. For anonymity this should be a throw-away server or a hacked box.
I've ...
CommunityBot
- 1
3
votes
2
answers
9k
views
Is it possible to stay anonymous on Windows 10?
After reading some information on anonymity, I noticed that almost all sites stated that Windows 10 does not really allow you to stay hidden online,
even when using services like Tor.
I would like to ...
0
votes
0
answers
119
views
Can WebASM provide JavaScript style interactivity without the same vulnerabilities?
JavaScript is useful for interactivity. However, it is often disabled by security conscious browsers, such as the Tor Browser Bundle, and blocked with plugins such as NoScript.
I was wondering if it ...
- 713
1
vote
1
answer
331
views
How do I switch appearances with Tor when onion routing is disabled?
If I run the Tor Browser with onion routing disabled at home, obviously my real IP address is sent to the Web servers I'm connecting to, and Web servers and various third parties can make a decent ...
1
vote
0
answers
819
views
How does a website know if i've visited it before? (and how to bypass that) [closed]
For example: https://pdfcandy.com/pdf-ocr.html has a limit on how many times I can use a feature per hour, but if I use an incognito tab I can easily bypass that.
But with https://ichigoreader.com/...
- 132k
1
vote
1
answer
136
views
Android- ads in applications are in local language even when using proxy
I have noticed some weird behavior on my smartphone that I can't explain myself.
I'm using Orbot application as proxy to route all of the phone's internet traffic through the Tor network.
When I ...
CommunityBot
- 1
0
votes
0
answers
196
views
Requests to malicious IP being sent by background process on Windows
Whenever an internet connection is established on my pc, I am repeatedly getting warnings from QuickHeal like this:
I am getting such warnings repeatedly with different IP addresses. In the above ...
- 1
1
vote
1
answer
520
views
What does a domain seizure entail?
For context, I have limited knowledge pertaining to computer networks, and the recent seizure of z-library brought up some questions I am unsure of, and I can't seem to find much information online.
...
- 50.3k
0
votes
2
answers
555
views
Has there ever been a country that implemented whitelist-based internet censorship?
We hear time and time again of countries censoring internet traffic by blocking IP Ranges.
Without getting into the politics of it, let's take for example China's Great Firewall. Even though it is ...
- 132k
17
votes
3
answers
17k
views
How safe is Tor from MITM/snooping attacks?
I am behind an HTTP proxy, and I frequently tunnel out via an ssh -D SOCKS proxy (I have access to a couple of outside servers which I can tunnel to) when the HTTP proxy causes problems1.
Now, this ...
- 12.5k
1
vote
2
answers
2k
views
Can Tor bridges really prevent ISPs from knowing the fact that you are using Tor?
Using Tor bridges for censorship circumvention routes your traffic to a bridge before an entry node. If the IP of the bridge is constant, isn't it abnormal that you are always connecting to the same ...
CommunityBot
- 1
0
votes
0
answers
1k
views
How does the --os-shell parameter in Sqlmap work? Is it still anonymous over Tor?
How does the --os-shell parameter in Sqlmap work? I know its uploading a backdoor, but how is Sqlmap uploading it and is the file just a normal reverse shell trojan?
Also, is it still anonymous when ...
- 1,019
0
votes
1
answer
454
views
Alternative for secure browsing since Tor is too slow
What options for secure browsing are available these days? I always used Tor, but since the DDOS attack, even simple sites like google.com need almost 2 minutes to load.
By "secure browsing" ...
- 3,445
3
votes
1
answer
1k
views
Difference between Tor over VPN and VPN over Tor
I saw many posts here saying that Tor over VPN is different from VPN over Tor, and one is better than other, but I was unable to find any explanation over it. There were some speculations that you ...
- 67.1k
18
votes
1
answer
21k
views
What is this potential identity leak that NoScript warns about?
Recently, while using the Tor Browser, NoScript popped up the following warning when I opened a stack overflow link in a new tab from duckduckgo:
Potential Identity Leak
You are about to load a page ...
- 11.6k
6
votes
4
answers
8k
views
Is using Tor and VPN combination more secure?
I have been reading more about Tor and its risks to personal data leakage to the exit nodes in the chain. This last node can snatch encryption keys or log in information of websites I may have ...
- 67.1k
0
votes
1
answer
337
views
How to set up the Tor browser on Linux Mint in a VM with a VPN on the Host
(Forgive me, I don't know whether to post this here for in the "Tor" community)
I'm brand new to Tor, I understand the basics of how it works and the Do's & Don'ts. I have a Windows 10 computer (...
CommunityBot
- 1
11
votes
2
answers
18k
views
Is chaining multiple VPNs a good way to reach anonymity on the internet?
I would like to chain a couple, say 6 or 7, VPNs together to create a sort of "super" encrypted lane on the internet. I'm not too concerned about speeds, all I want is privacy and anonymity.
I've ...
CommunityBot
- 1
-2
votes
1
answer
2k
views
VPN vs VPS vs TOR vs ANON_PROXY? [closed]
Which option is better for anonymity among these 4 choices? When can the ISP or website see you? When can't they?
(There are some articles through google, "VPN and TOR difference" or etc, ...
- 132k
12
votes
8
answers
14k
views
How anonymous is my setup?
my friend and I are trying to make the most anonymous setup for a computer to do things across the internet without being known the location from which it came.
Our setup is as follows:
A windows ...
- 67.1k
1
vote
1
answer
325
views
If Tor does Diffie-Hellman with each node how do they all not know the sender
I'm a bit confused by something regarding Tor. As per what I have read and confirmed in this answer Tor: Is a Diffie-Hellman key exchange being done over recipient of traffic? the client does a DH key ...
- 5,507
5
votes
1
answer
2k
views
Tor: Is a Diffie-Hellman key exchange being done over recipient of traffic?
As I was looking over Tor specifications and I noticed that when a circuit is generated then on each circuit's node a Diffie-Hellman key exchange is being done over an encrypted path on each Node as ...
- 5,507
-2
votes
2
answers
2k
views
Why do people claim Tails is more secure than Windows?
Why do some people say that using Tor within my normal operating system will not be safe? What differentiates Windows and Tails in this regard?
I believe that running Windows together with a VM, VPN ...
- 1