Questions tagged [tor]
Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis. For non-security questions about Tor, see our sister site Tor Stack Exchange.
523
questions
3
votes
1
answer
447
views
Do real-name email adresses hurt the anonymity provided by torbirdy?
Scenario:
Someone uses thunderbird to manage her various email addresses. All of those contain her real name (work, university, ...). One day, she has need of an anonymous email account and so creates ...
- 213
0
votes
1
answer
498
views
Netcat does not receive an response over tor
I configured Tor Hidden Service to forward from port 5400 to 127.0.0.1:1234. Then i restared tor and I got hostname. Now I run nc -l 1234 and i visit the website and I receive a GET request. Now I ...
0
votes
1
answer
85
views
Tor website as proxy like receiving server
I want to create a anonymous application that will send data all the time to my server. I don't want my ip to be exposed so I wanted to use Tor. I wanted to send sniffed packets to this server and ...
2
votes
2
answers
2k
views
How does Cloudflare track their client? Tor is not a workaround
I mirrored a ecommerce site using wget. This site seems to use Cloudflare to handle their web traffic.
What's interesting is that after 90 % or so of the mirroring was done, wget started to produce/...
- 499
0
votes
1
answer
189
views
How would an attacker know what version of tor/TAILS I'm using?
Everytime a new version of TAILS comes out, it's recommended to download and install immediately because of known vulnerabilities with the last one.
Since no relay except the middle relay knows the ...
- 983
0
votes
1
answer
696
views
At which point does an exploit against TAILS happen?
Since TAILS by default disallows root/superuser privileges and since traffic is sent encrypted with each relay removing a layer until the exit node, at what point is an exploit on a version of TAILS ...
- 983
0
votes
1
answer
623
views
what attacks are possible on outdated versions of TAILS?
I know using outdated software is a bad idea, but until recently I have only been able to boot TAILS from LiveCDs that come with some Linux magazines. Since these arrive in my country late, I end up ...
- 983
1
vote
0
answers
93
views
Sudden spike in received traffic when connecting to the Tor Network [closed]
Recently when using Tails, I've noticed that the traffic suddenly jumps to over 1TB when establishing a conenction to the Tor network after booting. It doesn't show up in Total Received and also, for ...
- 983
2
votes
1
answer
1k
views
Why is the data from a Tor exit node not encrypted?
Tor works in such a way that the data is encrypted by the three nodes. I.e., the entry node, relay and the exit node. But why is it not encrypted from the exit node to the destination server? Is this ...
- 133
-2
votes
1
answer
241
views
why certification authority?
As I understand it, CAs have the job to make sure that the encryption via a passphrase used when visiting a website (https://) stems from the website itself and nobody else. Or that if I exchange ...
- 11
2
votes
2
answers
1k
views
Revealing IP of an email recipient using remote PHP script or pixel tracking
I read through the search items and similar threads but my query is rather specific.
I know it's possible to reveal IP of an email recipient if we can get the person to click on an attached image or ...
user182445
3
votes
1
answer
244
views
How anonymous is it to use Facebook's Tor-site?
How anonymous, with respect to Facebook, not the rest of the world, is it to use Facebook via https://www.facebookcorewwwi.onion/ rather than the usual site? That is, if two different Facebook users ...
- 499
0
votes
1
answer
328
views
Are VPN users identifiable by matching their connection to the VPN server?
Given a nation-state has full access to the logs of the ISPs operating on its territory and given it knows that a certain activity has been conducted by a user from its territory, can they do the ...
- 1
4
votes
0
answers
91
views
Did Freedom System 2.0 used to provide privacy and pseudonymity via onion routing?
I have been reading a paper known as "Freedom System 2.0 Architecture" where a user's IP traffic is being transferred between a path of Freedom Server Nodes before reaching to its end destination. It ...
1
vote
1
answer
997
views
Tor "Security Slider" - What security does it provide?
When opening up Tor Browser for the first time I am notified of the existence of the Security Slider. The docs explain what each security level does in terms of functionality.
I haven't found a solid ...
2
votes
2
answers
1k
views
How to route internet traffic through Google
I'm in a situation where my network provider blocks all my internet access except for Google and its branches (Drive, Gmail, etc).
I'm looking for a way to route my traffic through Google (with Google ...
9
votes
1
answer
938
views
How to obtain privacy and authenticity with DNS?
I use pfSense (Unbound) as my local resolver. Historically I've pointed it at root recursive resolution, because I perceived my main threat as trustworthiness and recency of data (poisoned/invalid DNS)...
- 1,684
0
votes
2
answers
689
views
Tor exit node inside the website server to prevent anything in the clear over the wire?
Here's the problem:
Can you trust Tor’s exit nodes?
Excerpt:
Chloe set up a fake website with a Bitcoin theme, downloaded a
complete list of exit nodes and then logged in to the honeypot site
...
- 977
5
votes
1
answer
2k
views
Tor: Is a Diffie-Hellman key exchange being done over recipient of traffic?
As I was looking over Tor specifications and I noticed that when a circuit is generated then on each circuit's node a Diffie-Hellman key exchange is being done over an encrypted path on each Node as ...
-4
votes
1
answer
150
views
Can VPN or Tor exit nodes modify the webserver's hostname?
For example, if I go to google.com can they send back fakegoogle.com?
- 93
1
vote
1
answer
586
views
Error on Proxychains + Tor
I'm trying to connect through Proxychains and nc to a website but I get this error:
myip.gelma.net:23: forward host lookup failed: Unknown host
Previously, I was reciving this error:
|DNS-...
3
votes
3
answers
784
views
Test a clearnet website for a hidden service?
Recently I did an nmap service scan against a list of domains and one of the NSE scripts running was fingerprint-strings.
This script apparently extracts ASCII strings from unidentified services.
...
- 33
-1
votes
1
answer
1k
views
How to prevent Tails OS from accessing hard drive?
I had a question regarding the Tails OS. I just want it for some regular Tor browsing. Is it guaranteed that the hard disk is not accessible in case something goes terribly wrong? (Worst case scenario?...
0
votes
1
answer
1k
views
Will I be 100% secure (anonymous) when using the "regular" web through Tor? [duplicate]
If I use Tor to access "regular" internet sites, like Yelp, Amazon, and others to leave reviews, will I be I 100% anonymous? (Without changing my IP and MAC addresses?)
- 17
-1
votes
1
answer
846
views
Which of these configurations is better to stay anonymous on the internet? [duplicate]
MyPC > RDP > Windows VPS > Tor > Socks5 > Internet
or
MyPC with Tor sandboxed > socks5 > Internet.
Which is better? Any better idea that doesn’t compromise on network speed?
- 39
3
votes
2
answers
15k
views
What is the pitfall to connecting with Tor on a public wifi hotspot?
I often use public wifi hotspots to connect to the Internet. Is my data encrypted right before it leaves my system and so protected from network observers/snooping if I use tor?
- 39
1
vote
3
answers
486
views
Do I run the risk of not being anonymous with this setup?
Basically, I created a gmail account using a VPN, and then created a tumblr associated with that Gmail also using a VPN. However, I am now realizing that tumblr records the type of device I am using ...
- 123
6
votes
3
answers
2k
views
How precisely can your ISP tell you are using Tor?
I often read that your ISP can tell if you are using Tor. Assuming you use a bridge the only way to do this seems to be statistical analysis of a packet capture. How exactly is this done given that ...
- 61
2
votes
1
answer
1k
views
Is there a simple way to withstand a Tor correlation attack?
Suppose my opponent watches the traffic between my provider and the first relay in the chain and also between the output relay and the website that I visit.
Is there a simple way in this case to make ...
1
vote
1
answer
407
views
Secure to run a tor bridge as current user?
It is secure to run a tor bridge node from my current user, have in mind that I can use sudo?
Here is the torrc:
ORPort 9001
Nickname somenick
ExitRelay 0
ExitPolicy reject *:* # no exits allowed
...
- 113
-1
votes
1
answer
540
views
Is my computer safe after accessing .onion sites without VPN?
After watching a youtube video about .onion sites and I got Tor and just went on one without clicking any of the links. Then I got off Tor and that was pretty much it.
But I've read an article about ...
- 99
5
votes
1
answer
700
views
How to Survive Iran's Internet Censorship in January 2018?
The Iranian government has harshly cracked down the Internet. Aside from denied access to many websites and services, many VPN services are disrupted. Formerly, Cisco AnyConnect Compatible VPN ...
- 233
6
votes
1
answer
278
views
Can an attacker who has gained control over my router compromise anonymity through Tor?
If an attacker manages to infect my router with malware and sets up an entry node, can they force my computer to connect to their entry node?
If my computer does connect to their entry node, can they ...
- 61
0
votes
2
answers
176
views
Can be Tor Colleration Attack used in court? [closed]
Suppose I send death threats using Tor. Then, I send update again. Victim says it is me. Police checks logs on the server and at my ISP. The IP addresses do not match since I used Tor, but there's ...
- 2,731
2
votes
1
answer
3k
views
Anonymity Stack: Home connection -> VPN -> Whonix(Tor) -> Socks5. Few questions on anonymity
So let's assume the following:
1. A host machine running a clean BSD-based OS that has no backdoors, malware, spyware or other potentially de-anonymizing harmful software.
2. One home internet ...
10
votes
1
answer
5k
views
wget: what security issues am I not considering?
Questions: based on the details provided below, (a) what potential security vulnerabilities and threats might I face in my use of wget and (b) what recommendations would you give for mitigating those ...
- 177
3
votes
0
answers
162
views
Is there a secure, anonymous peer to peer matching solution?
I am newbie so please pardon my naivete. I was wondering if there is any cryptographic procedure that allows for peer to peer matching.
Perhaps to illustrate my question I will use an example. Say I ...
1
vote
1
answer
241
views
Can this bug on Tails Linux/Tor Browser be unsafe?
I noticed some images only will be loaded if they are before cached.
That is, if I open the browser it won't load directly. But if I first load the image individually on the browser and later I open ...
- 13
3
votes
2
answers
227
views
SSL for external micro-services for Tor hidden service
I building a Tor hidden service for educational purposes, and I'm trying to make it as secure as I can. The main app is in Rails, and I'll communicate with multiple micro-services.
Due to bandwidth ...
- 31
1
vote
1
answer
542
views
Can correlation attacks (end-to-end confirmation) be used as a defense?
Just speculating here. So just like timing and data sizes are used to correlate from end to end on a Tor network to deanonymize a user, can the same method be used on a single device to monitor and ...
- 11
0
votes
1
answer
1k
views
Ability to get a MAC address and IPv6 through proxy servers
Now I'm pretty sure I know the answer to this question, but I am just curious to see what the security experts of the world think of this.
First a little back story:
I was a former member of a ...
- 43
1
vote
0
answers
825
views
reverse_tcp not working with tor
I have the following situation.
I have configured proxychain with tor. I collect my IP address (provided by tor) from whaismyip_dot_com and set that ip as LHOST and used my localport as LPORT in ...
- 11
0
votes
3
answers
420
views
Tor exit node as CentOS mirror
Today we saw traffic going from CentOS servers to a Tor exit node. This caused some raised eyebrows and led us to investigate what was going on.
In the end it turned out that this exit node also acts ...
- 101
0
votes
2
answers
782
views
Tor communication from exit to origin
hope this question has not been asked like this before - I've seen something similar but could not understand the process. So my question is
regarding Tor communication:
origin -> destination and
...
0
votes
2
answers
281
views
Website just installed something to tor browser without my permission
This is an assumption, but as i was connecting to a website I saw the alert 'so and so website wants to install something to tor browser' and there was the 'Allow' button. I was going to retreat but ...
- 450
1
vote
1
answer
892
views
In Tor, why are the middle and exit relays changed periodically but not the guard relay?
In Tor, middle and exit relays are changed periodically and are chosen from a available relays, what is the reason behind it?
Why the guard node isn't changed that much frequently? Isn't it a highly ...
- 113
1
vote
1
answer
158
views
Using Tor with Tails only as a client
I'm running a VM with Tails to use the Tor network with the Tor browser. I've heard about the risk of getting an exit-node myself and the tipp to deactivate this option.
Where can I do this in tails?
- 121
-1
votes
1
answer
317
views
Tails for infected machine [closed]
Would running Tails on an infected machine with Windows OS be best? Would it resolve the current malware rootkit RAT as you are on a separate OS?
As long as you use the Tails OS and don't go into the ...
- 1
4
votes
1
answer
2k
views
Can the real IP address leak using curl via Tor?
Having seen Tor via Python - can the real IP address leak? I am no longer sure whether or not using
curl -L --insecure -C - --socks5 localhost:9150 -H "User-Agent: " check.torproject.org
is as ...
- 43
2
votes
2
answers
229
views
Is there anyway at all people on my wifi could see I use TOR? [duplicate]
When I use TOR, is there any way that the family could see I use it?
- 31