Skip to main content

Questions tagged [tor]

Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis. For non-security questions about Tor, see our sister site Tor Stack Exchange.

36 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers
115 views

Did Freedom System 2.0 used to provide privacy and pseudonymity via onion routing?

I have been reading a paper known as "Freedom System 2.0 Architecture" where a user's IP traffic is being transferred between a path of Freedom Server Nodes before reaching to its end destination. It ...
Dimitrios Desyllas's user avatar
3 votes
0 answers
130 views

Can botnets/malicious traffic be effectively reduced on my exit nodes?

I host a small collection of TOR exit nodes to the clear net. Believe it or not, the number one complaint I get in my inbox is not due to illegal materials coming through the nodes (of which I have ...
tuskiomi's user avatar
  • 202
3 votes
1 answer
234 views

Do VPNs log and analyze OCSP requests?

I am a privacy-conscious user currently living in Russia where the Internet is censored and monitored by the Russian state. Russian ISPs are legally required to log and store all users’ Internet ...
Gilgamesh's user avatar
3 votes
0 answers
186 views

Is there a secure, anonymous peer to peer matching solution?

I am newbie so please pardon my naivete. I was wondering if there is any cryptographic procedure that allows for peer to peer matching. Perhaps to illustrate my question I will use an example. Say I ...
Chukwunonso Arinze's user avatar
2 votes
3 answers
924 views

Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?

Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted? If not then is there any way to visit a malicious ...
User4857's user avatar
2 votes
0 answers
600 views

How to harden portable Tor Browser installation (SELinux, sandbox)?

tldr How can I define a SELinux policy, that limits filesystem access of portable Tor Browser to its installation directory, say /home/user/.local/opt/tor-browser_en-US? How might Tor Browser be ...
reynor's user avatar
  • 21
1 vote
0 answers
120 views

How to diagnose a DDOS on a home network?

I'm a user with a consumer level modem and a plain wifi router. I have been seeing activity where for long periods of time over night, my internet connection will shut off for 10-20 minutes at a time. ...
tuskiomi's user avatar
  • 202
1 vote
0 answers
1k views

What are the risks of running SSH over Tor?

Goal The intention is to set up an SSH entrance which is more secure (or at least more obfuscated) than a default setup with Port Forwarding or VPN. Previous research and context TL;DR, see question ...
Saul Goodman's user avatar
1 vote
0 answers
157 views

How does Tor's second node know the key to decrypt the second layer?

I was watching this video explaining how tor works: https://youtu.be/QRYzre4bf7I It explains it with the example of 3 intermediate nodes between client and server. It says that each of the nodes can ...
RenatoRenatoRenato's user avatar
1 vote
0 answers
257 views

VPS for Tor & I2P - which other services can I safely run on same?

I'm toying with the idea of setting-up a Tor node (middle/guard) and an I2P node on the same VPS. I think that should be safe(ish)... But I'm wondering what other services I could run without it/them ...
Baard Kopperud's user avatar
1 vote
1 answer
492 views

Anonymous video uploading on an internet host

How much video uploading could be trackable for some person who uses the Tor Browser for uploading video on YouTube or other video hosting services with low authorization and sign-up processing, like ...
Soheil Paper's user avatar
1 vote
0 answers
126 views

Is it possible to get redirected to a malware download URI while using Tor as a proxy?

Now this is an interesting one. I just received a forwarded email notification from my data center provider that one of my servers accessed a sink hole that is associated with the nymaim malware. The ...
Jabb's user avatar
  • 111
1 vote
0 answers
156 views

Is there a way to automatically change Tor Identities on Whonix?

I wanted to automatically change to a new Tor identity, say after an x amount of time where x can be any amount from 1 minute to 120 minutes. Is any such utility available for Whonix?
User1902873's user avatar
1 vote
0 answers
863 views

reverse_tcp not working with tor

I have the following situation. I have configured proxychain with tor. I collect my IP address (provided by tor) from whaismyip_dot_com and set that ip as LHOST and used my localport as LPORT in ...
al mamun's user avatar
1 vote
0 answers
829 views

Port forwarding and DMZ not working

Am trying to run a tor-relay on my raspberry-pi. I have a static IP configured on my pi and enabled the tor service. But when I tried to do port forwarding for my pi's static ip on my ORport, it is ...
Hemanth's user avatar
  • 171
1 vote
0 answers
234 views

Is it suspicious that mail server sends traffic to Tor Exit node?

I am monitoring the outbound traffic from mail server through IDS and recently I observed there were some traffic sending to Tor Exit nodes from mail server, for example, IP 46.183.85.124. After doing ...
Yang Yu's user avatar
  • 449
1 vote
0 answers
269 views

Whonix Signature verification failure

I've downloaded Whonix images and I have successfully imported the signing key (https://www.whonix.org/wiki/Whonix_Signing_Key). I have also established trust for the said key and verified that by ...
Parth Maniar's user avatar
1 vote
1 answer
214 views

Security of host computer and network with Tor

I'm considering running a Tor (non-exit) relay on my personal Ubuntu 14.04 computer at home (which also has my personal data on it). I wanted to know if I should have any concerns about the security ...
firdaus's user avatar
  • 111
1 vote
0 answers
810 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat -...
Anon's user avatar
  • 11
0 votes
0 answers
124 views

These two pgp public keys are the same but different?

I'm doing some research on .onion websites and was trying to verify an onion URL. I got a public key from two different sources: side by side they are identical until about ten lines before the end. ...
pilks7's user avatar
  • 1
0 votes
0 answers
75 views

Deploying a site with zero-knowledge?

Any methodologies of secret or private dev-ops as a service? The use-case I was thinking of is for example, a productized service like on Fiverr, eg. Seller will deploy your site onto TOR network and ...
Reed Jones's user avatar
0 votes
0 answers
168 views

Impact of Deep Learning Based Flow Correlation on Tor

It's been known ever since Tor existed that flow correlation attacks can break Tor's anonymity, but whereas in the past flow correlation attacks had a false positive rate far too high to be useful ...
DeepPSNA's user avatar
0 votes
0 answers
118 views

Can WebASM provide JavaScript style interactivity without the same vulnerabilities?

JavaScript is useful for interactivity. However, it is often disabled by security conscious browsers, such as the Tor Browser Bundle, and blocked with plugins such as NoScript. I was wondering if it ...
user5623335's user avatar
0 votes
0 answers
190 views

Requests to malicious IP being sent by background process on Windows

Whenever an internet connection is established on my pc, I am repeatedly getting warnings from QuickHeal like this: I am getting such warnings repeatedly with different IP addresses. In the above ...
DevRish's user avatar
0 votes
0 answers
1k views

How does the --os-shell parameter in Sqlmap work? Is it still anonymous over Tor?

How does the --os-shell parameter in Sqlmap work? I know its uploading a backdoor, but how is Sqlmap uploading it and is the file just a normal reverse shell trojan? Also, is it still anonymous when ...
UndercoverDog's user avatar
0 votes
0 answers
116 views

Anonymity setup criticism

My current setup up is for pseudonymous communication on a smartphone. I need help to know if I am doing anything wrong. GrapheneOS all traffic over tor using (orbot) using Signal with anonymous ...
rkohjkoe5554ew3's user avatar
0 votes
0 answers
176 views

Allow for login through Tor while preventing brute force/distributed password attacks?

I am making a website with the goal of blocking bots that are trying to login from different IP addresses constantly... while still allowing regular users to login via Tor. One of the approaches to ...
johnnyApplePRNG's user avatar
0 votes
0 answers
269 views

Using compromised tor bridge

If a malicious user creates a tor bridge, does that compromise the entire connection? I don't think so, because I thought they have to control both the entry and exit nodes. However, my friend is ...
ninaxg's user avatar
  • 1
0 votes
0 answers
512 views

MiTM attack on a Tor V3 Onion Service?

As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
Aaron Launius's user avatar
0 votes
0 answers
225 views

Tails anonymous filesharing

I performed some research on file sharing and anonymity, but it turns out anything I read is not about what I need. Most articles and forums recommend not to use services like Google Drive or Dropbox, ...
ace25's user avatar
  • 1
0 votes
1 answer
2k views

Whonix with Remmina to Connect on RDP - Is it safe?

I do not want my ISP logging any of my data, and do not trust my VPN either. Is it a safe measure to use Whonix in a VirtualBox, connecting over VPN, then using remmina to connect to an RDP? My goal ...
Just a guy on internet's user avatar
0 votes
0 answers
181 views

How would you hide your tracks/location without Tor or a VPN yourself?

This is kinda similar to this question, How can you hide / fake your ip address without proxy / vpn?, but this was about particular tools and their effectiveness. What I'm wondering is how someone ...
thinksinbinary's user avatar
0 votes
0 answers
378 views

What registrars support *.onion TLD as a Subject Alternative Name, and how does validation work?

I'm interested in obtaining a .onion TLD in my SAN name from a public CA. Which Public CAs support .onion TLDs and what is the validation process like (e.g. Whois isn't available for Tor) Update: ...
makerofthings7's user avatar
0 votes
1 answer
356 views

Are VPN users identifiable by matching their connection to the VPN server?

Given a nation-state has full access to the logs of the ISPs operating on its territory and given it knows that a certain activity has been conducted by a user from its territory, can they do the ...
breeby's user avatar
  • 1
-1 votes
1 answer
1k views

How many proxy_len is good in proxychains?

How many chains are the best? chain_len = ? I read somewhere at tor browser, that more than 4 is not good so I guess it applies the same to proxychains? the default setting is chain_len = 2.
Seandex's user avatar
  • 101
-1 votes
1 answer
604 views

Is my computer safe after accessing .onion sites without VPN?

After watching a youtube video about .onion sites and I got Tor and just went on one without clicking any of the links. Then I got off Tor and that was pretty much it. But I've read an article about ...
John Rawls's user avatar