Skip to main content
Share Your Experience: Take the 2024 Developer Survey
135 votes
Accepted

Tell browser my site has no scripts

A good option is to harden your Content Security Policy. It allows you to fine-tune which resources the browser will load/run, and is supported by most browsers. Consider the following header: ...
grc's user avatar
  • 1,845
81 votes
Accepted

How to detect if employees are using Tor?

You can use a list of Tor (uplink) nodes, add this to the outgoing firewall, setup a task to update this once a day and you'll be good. But Tor can also be used over a HTTP(S) proxy, so you will have ...
Yorick de Wid's user avatar
66 votes

Can anti-virus/virus protection be used to spy on you?

Any software you install on your system can compromise the system and thus affect security and privacy. This can be done either willingly or because of bugs in the software. And this is doubly true ...
Steffen Ullrich's user avatar
53 votes

How to detect if employees are using Tor?

I believe your major concern should be that: using anonymous proxy in the network Is a bad assumption. I would straight away ask: In which network? Yorick already touched this point but I'll be ...
grochmal's user avatar
  • 5,877
42 votes
Accepted

How did the FBI compromise Tor users?

The article you link says that the FBI obtained "the MAC address" for the user computers. MAC addresses are specific to each ethernet hardware, and they don't travel beyond the first hop -- meaning ...
Thomas Pornin's user avatar
38 votes
Accepted

Why is Home --> VPN --> Tor worse than Home --> Tor?

Preface: I consider this question to be a false dichotomy and an inversion of the burden of proof. One of the core tenets of building secure systems is that you minimise the attack surface, and resist ...
Polynomial's user avatar
  • 135k
29 votes

How did the FBI compromise Tor users?

The article you posted states how they did it. But the author doesn't seem to be knowledgeable on the subject and it got lost in the article. They didn't crack Tor and more so found a way to collect ...
Bacon Brad's user avatar
  • 3,392
21 votes
Accepted

What is this potential identity leak that NoScript warns about?

So after some digging into NoScript's settings, I found some settings for something called "Cross-tab identity leak protection". Googling this led to a tor project issue Targeted ...
nobody's user avatar
  • 11.6k
19 votes

Is Tor over VPN a security risk?

TOR connection to a VPN OK, VPN connection to TOR go to jail. This assessment, in general, is not accurate. Though it's true that there's always something that can go wrong with any security system. ...
aiootp's user avatar
  • 339
17 votes

Stop large requests to my server (TOR)

You could drop packets from tor nodes all together if you like with ip tables. List of tor nodes can be found at: Ref 1: https://check.torproject.org/cgi-bin/TorBulkExitList.py Ref 2: https://www....
Tim Jonas's user avatar
  • 827
17 votes
Accepted

Does Tor help us to prevent ISP tracking?

You cannot hide how much data you are sending and when you are online. But, Tor encrypts data and sends it through proxies before it reaches the target server, so that hides the contents of the ...
Luc's user avatar
  • 32.9k
14 votes
Accepted

Why is the data from a Tor exit node not encrypted?

Encryption of traffic exiting Tor and going to the destination server is based on whether the destination server supports encryption, and whether the destination server was addressed on an encrypted ...
gowenfawr's user avatar
  • 72.9k
13 votes

How to detect if employees are using Tor?

The only way you can be relatively sure Tor is not in use on the network is to inspect every device on the network and ensure that Tor is not installed or running on any of them. This could require so ...
Michael Hampton's user avatar
13 votes

Is it dangerous to use Tor?

It is difficult to say what nationstate intelligence agencies will do with people who use tor, since they don't generally reveal their procedures. However, there are approximately 2 million connected ...
Xiong Chiamiov's user avatar
11 votes
Accepted

How well Tor protects against fingerprinting?

When you do not change anything, the Tor browser is already configured in a way that the fingerprint is identical to every other Tor browser (and is close to the most common fingerprint on the web). I ...
Noir's user avatar
  • 2,573
10 votes
Accepted

Public WiFi and Tor?

Do you think that there's something wrong with this idea? Yes, quite a few points. Passing everything through TOR has the following consequences: Much slower traffic, which on a public WiFi spot is ...
Yorick de Wid's user avatar
10 votes

Why did the government made Project TOR public?

There are certainly a lot of reasons which we could speculate about, but one is fact and inherent in the way Tor works to provide anonymity to its users: If the "government" (or rather, the united ...
Out of Band's user avatar
  • 9,283
10 votes

What is Tor and is there anything I can do to stop it?

Using tor has not opened you up to "hackers, spying and very bad stuff," so be aware that is irrelevant. If that is what you are worried about then you need to do nothing. Tor is a way to preserve ...
Rory Alsop's user avatar
  • 61.5k
10 votes

Anonymity Stack: Home connection -> VPN -> Whonix(Tor) -> Socks5. Few questions on anonymity

First, some comments I'll be frank here. A lot of your setup is poorly thought out or outright dangerous. For example, using a proxy after Tor (it's not TOR) can greatly decrease anonymity as you now ...
forest's user avatar
  • 66.8k
10 votes

How does Tor maintain anonymity when a source and destination are required at the end?

The trick is that it's the payload of the packet that's encapsulated, not the whole TCP packet. Therefore, when the packet leaves the tor exit node unencrypted, it is sent with the return address of ...
TopherIsSwell's user avatar
8 votes
Accepted

Safest SQL database

TL;TR: these are not problems of the database. Maybe you are using a wrong architecture for your hidden service. And regarding the additional information after the edit of the question see at the end ...
Steffen Ullrich's user avatar
8 votes

How precisely can your ISP tell you are using Tor?

Standard Tor traffic Default Tor entry nodes are publicly listed. So, to block a standard Tor connection, your ISP just needs to check the IPs you're connecting to against a list of known nodes (...
Arminius's user avatar
  • 44.8k
8 votes

Can VPN or Tor exit nodes modify the webserver's hostname?

An exit node (no matter if Tor or VPN) has full control what data are sent and where they get sent to. This means it can modify the data from client to server, from server to client or send the data ...
Steffen Ullrich's user avatar
8 votes

How well can Tor + VPN secure my anonymity on the internet?

No. Just installing Tor and a VPN does not make you safe. Even if Tor was resilient against attack and VPN was secure and trustworthy, they would only mask your IP. Many people using Tor were caught, ...
Peter Harmann's user avatar
7 votes

How to detect if employees are using Tor?

Preventing the user from installing/using software that has not been approved by the company, by enforcing software policies on employees machine will suffice, combined to network authentication such ...
usr-local-ΕΨΗΕΛΩΝ's user avatar
7 votes

How Anonymous Am I?

It depends on what you are doing. If you're running BitTorrent from your laptop, you aren't anonymous at all, for instance, since it publishes your IP. If you log into your email, or your Facebook, ...
returneax's user avatar
  • 572
7 votes
Accepted

How does Tor network handle individual sessions?

Brief overview: First, you get a circuit of Tor nodes, let's say 1, 2, 3. Next, you craft an encrypted packet to node 3, encrypt that in a packet to node 2, then encrypt that in a packet to node 1. ...
d1str0's user avatar
  • 2,358
7 votes
Accepted

Does the Tor Browser leak a list of visited websites to TLD DNS services?

No, the Tor Browser never resolves hostnames itself. As you recognized, querying DNS servers directly would effectively allow an adversary to deanonymize you (a vulnerability known as DNS leak). When ...
Arminius's user avatar
  • 44.8k
7 votes
Accepted

Can the real IP address leak using curl via Tor?

--socks5 will use the SOCKS5 protocol for the HTTP connections but the name lookup will still be done using the normal DNS which means that your public IP address can be seen by the external name ...
Steffen Ullrich's user avatar
7 votes
Accepted

wget: what security issues am I not considering?

There are several questions in here. You are asking how to avoid detection, how to avoid attribution, and how to avoid exploitation. Though you did elaborate on your goals, I still don't know your ...
forest's user avatar
  • 66.8k

Only top scored, non community-wiki answers of a minimum length are eligible