2

I tried to follow the tutorial (https://www.torproject.org/docs/verifying-signatures.html.en) and also checked this forum looking for help (Tor Browser-how to verify signature?) but none of the things I've tried have worked yet.

So, if I happen to be lazy and decide to go on and start using Tor Browser, how dangerous would it be to surf on the web using a non-verified Tor browser?

Thank you.

Improve this question

1 Answer 1

Reset to default
1

You better avoid this kind of running: when I helped people I saw a fake Tor Browser distributions: tor.exe binary was replaced with some malicious program that even tried to mimic original program's behaviour and even log output! So - do yourself a favour - check the signature. it is simple. Need help with signature checking?

Improve this answer
6
  • Ok tanks. Yes, I need help with signature checking. As I posted, I've tried to do it several times without any success. I downloaded Tor Browser from the official website, so it is very unlikely to be a fake version. Yet, I prefer no to take any risks and verify it. I tried to verify it using gpg2. Could that be the problem? Do I need to use another program?
    – Álvaro
    Commented Oct 2, 2016 at 15:29
  • @ÁlvaroMendoza use HashTab. Install it, download your file and use a right click and tab "File Hashes" =)
    – Alexey Vesnin ♦
    Commented Oct 2, 2016 at 20:09
  • I'm afraid it didn't work. It says "Without a licence for commercial use". There is an option of obtaining one, but you have to buy it from HashTab. Any steps I should follow? Do I have to do anything with the cmd? Thanks for your help, btw.
    – Álvaro
    Commented Oct 4, 2016 at 21:04
  • @ÁlvaroMendoza then install 7Zip - it also enables a right-click "CRC SHA" functionality in Windows
    – Alexey Vesnin ♦
    Commented Oct 5, 2016 at 3:40
  • Sorry for the long wait, I have been busy. I downloaded 7-zip. What should I do now? Which signature should I check: the .exe file, the .asc file or both? I have tried the right-click "CRC SHA" feature, but there are several options: CRC-32, CRC-64, SHA-1, SHA-256 and *. Which one should I check? Thank you very much.
    – Álvaro
    Commented Nov 4, 2016 at 16:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .