Questions tagged [tor]
Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis. For non-security questions about Tor, see our sister site Tor Stack Exchange.
523
questions
-1
votes
1
answer
123
views
tor traffic routing within tor network
I understand there is entry node, middle node and exit node when a user accesses an internet resource like https://www.google.com while coeected to the tor network.
Is the concept the same if the user,...
- 101
2
votes
1
answer
1k
views
Difference between Tor over VPN and VPN over Tor
I saw many posts here saying that Tor over VPN is different from VPN over Tor, and one is better than other, but I was unable to find any explanation over it. There were some speculations that you ...
- 23
2
votes
1
answer
138
views
Onion Routing Network: Analyzing the size of the encrypted message to determine distance along a circuit
I am teaching Anonymous Networks in a Cybersecurity class.
I am understanding (what I think) is a good deal about the process TORproject uses for its network by using this as a guide.
https://skerritt....
3
votes
1
answer
379
views
Is using email (protonmail with Tor Browser / obfs4 bridges) to contact embassy in potentially hostile foreign countries safe?
Suppose one wants to use email (say using protonmail with Tor Browser / obfs4 bridges) to discuss sensitive matters (such as asylum seeking / embassy protection) with embassy in potentially hostile ...
- 33
-1
votes
1
answer
164
views
IP hiding attempts are detected [closed]
So I am using Tor and I try to log into a certain web site. It gives me a message saying that my IP address was used for spamming and does not let me log in. I think ok, probably the exit node is ...
- 99
2
votes
1
answer
226
views
Tor for confidentiality on corporate network
I work in gov organization and recently I learned they set up a MITM, by installing some certificates - so when I visit any web site and then check the certificate info it shows the certificate ...
- 21
1
vote
1
answer
428
views
Anonymous video uploading on an internet host
How much video uploading could be trackable for some person who uses the Tor Browser for uploading video on YouTube or other video hosting services with low authorization and sign-up processing, like ...
- 111
2
votes
0
answers
514
views
How to harden portable Tor Browser installation (SELinux, sandbox)?
tldr
How can I define a SELinux policy, that limits filesystem access of portable Tor Browser to its installation directory, say /home/user/.local/opt/tor-browser_en-US?
How might Tor Browser be ...
- 21
0
votes
1
answer
666
views
Torrent sites on the onion network being served over http
I've noticed that torrent websites like the Pirate Bay are served over http.
This means that when using a network like the Tor onion network, where the first server in the response chain receives the ...
0
votes
1
answer
670
views
is metasploit under whonix anonymous?
If I run an exploit like EternalBlue with Metasploit on whonix to a remote machine, do I remain anonymous? I think I do because it goes over tor but I am not sure. Am I right?
- 1
1
vote
1
answer
232
views
Is saving a dark web page locally and reloading it in another browser a security risk?
Say I have Tor running and am browsing the dark web with the Tor browser. If I were to save a local copy of a web page and render it into another browser, like Chrome (with JS enabled), would I then ...
- 13
-1
votes
2
answers
519
views
Is Tor Private/Secure?
I have had Tor for a bit, I do not use it that often. But I am wondering if anyone knows if it is secure. How safe are onion connections?
- 23
0
votes
0
answers
234
views
Can Tor browser protect me from being found out? [duplicate]
I am using my computer, but am connected to my work's WiFi. Can my company see what websites I visit when am using Tor browser?
- 1
0
votes
3
answers
2k
views
What’s the point in using proxychains for an nmap scan when you could use Tor?
I always hear on YouTube and other places on the internet that Tor is the best option to stay anonymous. Tor is used by many activists, journalists etc. hiding from oppressive governments and so on. ...
- 11
0
votes
1
answer
156
views
Person tried to login in my website with non-existent username, but not a VPN nor Tor
I am managing a WordPress website.
I have installed the plugin "Limit Login Attempts Reloaded".
This plugin sent me an email saying that A.B.C.D has tried to login with the non-existent ...
- 517
2
votes
1
answer
215
views
Timeless timing attacks and response jitter
I've been researching timeless timing attacks, ie: timing attacks using concurrency rather than round trip time. Here is an article by portswigger with links to the original article by Van Goethem. ...
- 123
0
votes
0
answers
50
views
Surfed Darkweb carelessly [duplicate]
A while ago, I installed Tor app on my android (fully updated and Android 10) and with a free Vpn tried to open some sites listed on several blogs (like "best dark sites in 2020" or "...
- 1
0
votes
2
answers
191
views
Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)
In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
- 536
0
votes
2
answers
341
views
Staying anonymous vs a Five Eyes adversary?
If you were in a Five Eyes country and you wanted to contact someone else anonymously, without this person or the government finding out who you are or your location, how would you do it?
The person ...
1
vote
1
answer
253
views
Protect IP Address and location from Twitter
Is there a way to protect IP Address and location from Twitter after having logged in ? All I want Twitter to know is my email and password and nothing else. No IP Address, no location. Is that ...
- 11
1
vote
1
answer
303
views
Is it safe to visit any website in TOR when the Security Bar is set at Maximum? (Safest)
Someone has sent me a link on Tor which when visited instantly read that the website itself was not available and that apparently the link is broken somehow. When using Tor i use the option "...
- 11
2
votes
1
answer
570
views
Hiding Tor traffic to prevent deanonymization
I am trying to figure out what is the best way to hide Tor traffic in order to improve anonymity.
While Tor is pretty good at hiding users’ IP addresses, its traffic stands out. This can be ...
- 29
1
vote
1
answer
157
views
Can uncompressing a ZIP/tar.gz/rar/etc file execute some custom code?
So I recently downloaded Tor Browser on my Linux machine and what immediately caught my eye is the fact that after uncompressing the file (I think it was .tar.gz, but the question applies to every ...
- 1,554
0
votes
1
answer
670
views
Hiding ip address when using coinomi wallet
How do I hide my ip address if I use a wallet as coinomi? Do I have to use Orbot? If yes, what exactly should I do? (I'm using it from an android) I just want to have privacy when I log into the ...
0
votes
0
answers
459
views
MiTM attack on a Tor V3 Onion Service?
As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
0
votes
3
answers
2k
views
How Does Tor Prevent the Exit Node from Seeing the IP of a Tor Website
Usually the anonimity aspect of Tor is explained from the client point of view. The entry node can know who you are but cannot know which website you're accessing, and the exit node cannot know who ...
- 23
1
vote
1
answer
686
views
Preserving anonymity with ring 0 malware infected PC
I am attempting to determine whether it would be possible to maintain your anonymity while using an internet-connected PC infected with ring 0 malware. The threat model assumes the adversary is ...
2
votes
1
answer
1k
views
Why does Tor browser use POST method for DuckDuckGo?
I noticed that the default behavior of Tor browser is to use POST method for all DuckDuckGo searches even when that's not the default DuckDuckGo setting. At first I thought it'd be to protect the ...
- 646
1
vote
1
answer
147
views
Is there a reasonable chance of a well-funded agent obtaining raw traffic over Tor circuits
If an agent has a few middle Tor relays (Am) and a few exit Tor relays (Ae), could they obtain the original traffic of some of the circuits with a reasonable probability?
Let's assume, without too ...
0
votes
0
answers
76
views
Visual Studio Code on Linux - Privacy risk? [duplicate]
I'm a fan of Visual Studio, and recently installed VSC on my Linux Mint. However recently I did a deep-dive on Richard Stallman's site reading about just how evil and depraved all the big tech ...
- 101
4
votes
2
answers
2k
views
Analyzing Tor traffic through Deep Packet Inspection?
I've just read about the detecting and blocking of Tor traffic by DPI but now I'm curious about analyzing the data you send over Tor and matching it with your true identity by deep-inspecting the data ...
-1
votes
1
answer
3k
views
how to safely open files downloaded with tor? [duplicate]
If I download a file (PDF,doc,image,video etc) with a tails/tor setup, how can I ensure the file doesn't "call home" or isnt imbedded with malware (other than looking at the hash)? Will a ...
0
votes
0
answers
86
views
What can a government agency see if they control Tor nodes? [duplicate]
If I use Tails/tor on public WiFi, and a government agency is controlling /snooping nodes or uses malware to conduct a waterhole attack, what information can they gather about me?
2
votes
1
answer
358
views
How anonymous would this be? [closed]
I use a laptop running tails/tor to go to a public wifi spot like a coffee shop and set up a new email account on protonmail. Then I take that laptop to a park in the middle of the night where there's ...
1
vote
0
answers
21
views
Tor and MITM SSL [duplicate]
In my company they have MITM/SSL in following way.
There is a proxy to whom all PCs connect.
Now the company installed some trusted certificate authority (e.g. ISSUER-COMPANY-NAME) on our computers.
...
- 11
0
votes
2
answers
245
views
Is it possible to create a hardware 'Plug and Play' TOR proxy?
Is there a way to use a device like a raspberrypi to create a kind of 'Plug and Play' TOR proxy?
Ideally, a device would exist with an ethernet port as input and ethernet cable or USB as output which ...
- 93
0
votes
1
answer
404
views
What can people do about Tor's weaknesses?
I read Tor's Wikipedia page and found out it has 12 weaknesses. What can people or The Tor Project do about those weaknesses? If they don't anything about it, wouldn't it compromise Tor users' ...
- 101
1
vote
1
answer
575
views
How to configure VPN + Tor + linux as a proxy server? [closed]
Goal
To hide the IP address using Tor, which goes through a proxy server to make HTTP/FTP requests look like they came from a regular user, not one who uses Tor.
Example
A user requests the website. ...
- 111
0
votes
0
answers
626
views
Reverse shell from backdoor - exposing attacker? [duplicate]
If an attacker successfully installed a backdoor that connects to his computer via a reverse shell, how can the attacker hide his IP address?
I'd guess he can't use Tor or a VPN, because packet ...
9
votes
2
answers
2k
views
How can malware discover the real IP of a TAILS user?
The FBI recently used a 0day exploit to hack a TAILS user and expose their real IP.
I am interested in how they could have managed to obtain the user's real public IP after compromising the machine. ...
- 11.5k
2
votes
1
answer
262
views
How does Tor preserve anonymity if it uses normal Internet Routing?
I'm studying Tor and Onion Routing and I don't understand how it preserves anonymity if the Internet routing is still done using public ip addresses.
Let's suppose we have the following Tor circuit: ...
- 37
2
votes
1
answer
233
views
Seems my CNAMEs got "curled". Somebody please explain this to me
According to my CloudFlare firewall logs, somebody went through each of my subdomains. My website is not advertised, it doesn't even show on Google unless typing the exact domain name into it. I think ...
- 29
1
vote
1
answer
254
views
Which approach is technically more effective to hinder user tracking - fingerprint generalization or randomization?
Tor's approach to countering fingerprinting is to make as many users "appear the same" as possible. Let us call this "generalization". While Brave tries to randomize all fingerprints of each and every ...
0
votes
0
answers
189
views
Tails anonymous filesharing
I performed some research on file sharing and anonymity, but it turns out anything I read is not about what I need.
Most articles and forums recommend not to use services like Google Drive or Dropbox, ...
- 1
-1
votes
1
answer
1k
views
How many proxy_len is good in proxychains?
How many chains are the best?
chain_len = ?
I read somewhere at tor browser, that more than 4 is not good so I guess it applies the same to proxychains?
the default setting is chain_len = 2.
- 101
7
votes
2
answers
1k
views
Can DeepCorr's correlation technique de-anonymize all Tor users?
https://people.cs.umass.edu/~amir/papers/CCS18-DeepCorr.pdf
https://www.youtube.com/watch?v=_OKLtKgEn4k
I have some questions about this "Deepcorr". Does "DeepCorr" really work that good? They say ...
- 91
0
votes
1
answer
1k
views
Can global adversaries 'de-anonymize' any Tor user in a day?
Tor traffic correlation attacks by global adversaries
I know what traffic correlation attack is but I find it hard to understand this article or how it got to its conclusions about 'de-anonymize' '...
- 3
0
votes
1
answer
187
views
Remote working. Is my employer able to monitor my activity
Due to situation, my employer made a work-from-home policy.
And remote administration tool is not installed, since I did clean installation of the system.
Is my employer able to see my activity?
...
12
votes
2
answers
2k
views
How does Tor maintain anonymity when a source and destination are required at the end? [duplicate]
I had a question about Tor and the anonymity status of a fully decrypted packet that leaves a Tor exit node. My high-level understanding is that prior to a packet traversing the Tor network, a Tor ...
- 121
3
votes
2
answers
995
views
Is it possible to spy on Tor browser within local network?
Imagine yourself connecting your personal device to your workplace wi-fi network.
Can managers, network administrators, or some other person/potential attacker see my browser's activity if I'm using ...