Questions tagged [tor]
Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis. For non-security questions about Tor, see our sister site Tor Stack Exchange.
35
questions with no upvoted or accepted answers
4
votes
0
answers
90
views
Did Freedom System 2.0 used to provide privacy and pseudonymity via onion routing?
I have been reading a paper known as "Freedom System 2.0 Architecture" where a user's IP traffic is being transferred between a path of Freedom Server Nodes before reaching to its end destination. It ...
3
votes
0
answers
78
views
Can botnets/malicious traffic be effectively reduced on my exit nodes?
I host a small collection of TOR exit nodes to the clear net. Believe it or not, the number one complaint I get in my inbox is not due to illegal materials coming through the nodes (of which I have ...
- 192
3
votes
0
answers
160
views
Is there a secure, anonymous peer to peer matching solution?
I am newbie so please pardon my naivete. I was wondering if there is any cryptographic procedure that allows for peer to peer matching.
Perhaps to illustrate my question I will use an example. Say I ...
2
votes
1
answer
145
views
Do VPNs log and analyze OCSP requests?
I am a privacy-conscious user currently living in Russia where the Internet is censored and monitored by the Russian state. Russian ISPs are legally required to log and store all users’ Internet ...
- 21
2
votes
3
answers
473
views
Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?
Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?
If not then is there any way to visit a malicious ...
- 31
2
votes
0
answers
511
views
How to harden portable Tor Browser installation (SELinux, sandbox)?
tldr
How can I define a SELinux policy, that limits filesystem access of portable Tor Browser to its installation directory, say /home/user/.local/opt/tor-browser_en-US?
How might Tor Browser be ...
- 21
1
vote
0
answers
359
views
What are the risks of running SSH over Tor?
Goal
The intention is to set up an SSH entrance which is more secure (or at least more obfuscated) than a default setup with Port Forwarding or VPN.
Previous research and context
TL;DR, see question ...
- 11
1
vote
0
answers
106
views
How does Tor's second node know the key to decrypt the second layer?
I was watching this video explaining how tor works: https://youtu.be/QRYzre4bf7I
It explains it with the example of 3 intermediate nodes between client and server. It says that each of the nodes can ...
1
vote
0
answers
196
views
VPS for Tor & I2P - which other services can I safely run on same?
I'm toying with the idea of setting-up a Tor node (middle/guard) and an I2P node on the same VPS. I think that should be safe(ish)...
But I'm wondering what other services I could run without it/them ...
- 777
1
vote
1
answer
424
views
Anonymous video uploading on an internet host
How much video uploading could be trackable for some person who uses the Tor Browser for uploading video on YouTube or other video hosting services with low authorization and sign-up processing, like ...
- 111
1
vote
0
answers
99
views
Is it possible to get redirected to a malware download URI while using Tor as a proxy?
Now this is an interesting one. I just received a forwarded email notification from my data center provider that one of my servers accessed a sink hole that is associated with the nymaim malware. The ...
- 111
1
vote
0
answers
115
views
Is there a way to automatically change Tor Identities on Whonix?
I wanted to automatically change to a new Tor identity, say after an x amount of time where x can be any amount from 1 minute to 120 minutes. Is any such utility available for Whonix?
- 11
1
vote
0
answers
823
views
reverse_tcp not working with tor
I have the following situation.
I have configured proxychain with tor. I collect my IP address (provided by tor) from whaismyip_dot_com and set that ip as LHOST and used my localport as LPORT in ...
- 11
1
vote
0
answers
801
views
Port forwarding and DMZ not working
Am trying to run a tor-relay on my raspberry-pi. I have a static IP configured on my pi and enabled the tor service.
But when I tried to do port forwarding for my pi's static ip on my ORport, it is ...
- 151
1
vote
0
answers
206
views
Is it suspicious that mail server sends traffic to Tor Exit node?
I am monitoring the outbound traffic from mail server through IDS and recently I observed there were some traffic sending to Tor Exit nodes from mail server, for example, IP 46.183.85.124. After doing ...
- 439
1
vote
0
answers
244
views
Whonix Signature verification failure
I've downloaded Whonix images and I have successfully imported the signing key (https://www.whonix.org/wiki/Whonix_Signing_Key). I have also established trust for the said key and verified that by ...
- 349
1
vote
1
answer
184
views
Security of host computer and network with Tor
I'm considering running a Tor (non-exit) relay on my personal Ubuntu 14.04 computer at home (which also has my personal data on it).
I wanted to know if I should have any concerns about the security ...
- 111
1
vote
0
answers
776
views
How should I configure my Tor-dedicated firewall for optimum security?
I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy
i.e.
iptables -t nat -...
- 11
0
votes
0
answers
87
views
Impact of Deep Learning Based Flow Correlation on Tor
It's been known ever since Tor existed that flow correlation attacks can break Tor's anonymity, but whereas in the past flow correlation attacks had a false positive rate far too high to be useful ...
- 1
0
votes
1
answer
197
views
What is the difference between a VPN and a Tor Socks proxy on public wifi?
I seek protection against MITM & snooping of VPN or Tor proxy traffic on public WiFi.
So, what are the different security impacts of each of these 2 solutions:
Using a VPN (like Proton VPN) to ...
- 1
0
votes
1
answer
96
views
Does the first node in the circuit connecting the hidden service to the introduction point know the server's IP address?
I am doing research about the dark web. However I find it hard to understand how Tor hidden services work. The whole point of it is to actually anonymize the server from the client so that the client ...
- 1
0
votes
0
answers
74
views
Can WebASM provide JavaScript style interactivity without the same vulnerabilities?
JavaScript is useful for interactivity. However, it is often disabled by security conscious browsers, such as the Tor Browser Bundle, and blocked with plugins such as NoScript.
I was wondering if it ...
- 715
0
votes
0
answers
121
views
Requests to malicious IP being sent by background process on Windows
Whenever an internet connection is established on my pc, I am repeatedly getting warnings from QuickHeal like this:
I am getting such warnings repeatedly with different IP addresses. In the above ...
- 1
0
votes
0
answers
872
views
How does the --os-shell parameter in Sqlmap work? Is it still anonymous over Tor?
How does the --os-shell parameter in Sqlmap work? I know its uploading a backdoor, but how is Sqlmap uploading it and is the file just a normal reverse shell trojan?
Also, is it still anonymous when ...
- 947
0
votes
0
answers
79
views
Anonymity setup criticism
My current setup up is for pseudonymous communication on a smartphone. I need help to know if I am doing anything wrong.
GrapheneOS
all traffic over tor using (orbot)
using Signal with anonymous ...
0
votes
0
answers
126
views
Allow for login through Tor while preventing brute force/distributed password attacks?
I am making a website with the goal of blocking bots that are trying to login from different IP addresses constantly... while still allowing regular users to login via Tor.
One of the approaches to ...
0
votes
0
answers
206
views
Using compromised tor bridge
If a malicious user creates a tor bridge, does that compromise the entire connection?
I don't think so, because I thought they have to control both the entry and exit nodes. However, my friend is ...
- 1
0
votes
0
answers
457
views
MiTM attack on a Tor V3 Onion Service?
As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
0
votes
0
answers
188
views
Tails anonymous filesharing
I performed some research on file sharing and anonymity, but it turns out anything I read is not about what I need.
Most articles and forums recommend not to use services like Google Drive or Dropbox, ...
- 1
0
votes
2
answers
2k
views
Whonix with Remmina to Connect on RDP - Is it safe?
I do not want my ISP logging any of my data, and do not trust my VPN either. Is it a safe measure to use Whonix in a VirtualBox, connecting over VPN, then using remmina to connect to an RDP? My goal ...
0
votes
0
answers
152
views
How would you hide your tracks/location without Tor or a VPN yourself?
This is kinda similar to this question, How can you hide / fake your ip address without proxy / vpn?, but this was about particular tools and their effectiveness. What I'm wondering is how someone ...
- 149
0
votes
0
answers
358
views
What registrars support *.onion TLD as a Subject Alternative Name, and how does validation work?
I'm interested in obtaining a .onion TLD in my SAN name from a public CA.
Which Public CAs support .onion TLDs and what is the validation process like (e.g. Whois isn't available for Tor)
Update:
...
- 50.7k
0
votes
1
answer
327
views
Are VPN users identifiable by matching their connection to the VPN server?
Given a nation-state has full access to the logs of the ISPs operating on its territory and given it knows that a certain activity has been conducted by a user from its territory, can they do the ...
- 1
-1
votes
1
answer
1k
views
How many proxy_len is good in proxychains?
How many chains are the best?
chain_len = ?
I read somewhere at tor browser, that more than 4 is not good so I guess it applies the same to proxychains?
the default setting is chain_len = 2.
- 101
-1
votes
1
answer
537
views
Is my computer safe after accessing .onion sites without VPN?
After watching a youtube video about .onion sites and I got Tor and just went on one without clicking any of the links. Then I got off Tor and that was pretty much it.
But I've read an article about ...
- 99