3

When using Tor, if I download a file form a download-manager (on which Tor is not running) or if I check my emails using an email-clients, will this have any adverse effect on my anonymity? Will my real IP-address be exposed?

3 Answers 3

4

As long as what you are doing with your non-Tor applications and what you are doing in Tor is not related in anyway, it is safe.

But if they are related, for example if you are starting a download in your non-Tor application, for which the link/torrent you found on Tor (e.g. using Tor Browser), your current Tor session is deanonymized (IP address exposed). Likewise if you send a non-Tor mail to someone those mail address you just viewed in Tor, deanonymized.

Choose the green icons and "New Identity" in Tor Browser to create a new anonymous session. This will close all your current tabs.

Obviously, your non-Tor applications IP address is always exposed.

1
  • Thanks for the clear explanation. I also found this and this questions useful. Reference for others. Commented Jan 24, 2014 at 10:39
1

The existing answers cover the issue of cross-contamination between your internet use through Tor and outside it. It is definitely important that you need to be careful to not e.g. paste links obtained from clearnet into Tor Browser and vice versa.

But even with that care, your ISP (and anyone monitoring them) can still determine that you are using Tor, and that information could be correlated with monitored activity inside Tor to confirm a suspicion, if someone is looking. This is how the identity of Jeremy Hammond was confirmed. A common method of disconnecting Tor usage from a personal identity is to connect to Tor from a public place1, and it is here that additional care must be taken: if you simultaneously connect to personally-identifying services over the clearnet while there, all benefit of the public place is lost. Note that this might not even be a conscious act like browsing Facebook or Stack Exchange; your email client automatically checking for new mail would be sufficient.

tl;dr if your threat model involves evading the FBI, don't mix Torified-traffic and clearnet activity. (And if your threat model involves a larger adversary, even that may not help.)

1This assumes the public place cannot itself be correlated to the personal identity either historically or during the actual time-period of use, which is itself hard to ensure. Humans easily fall into existing patterns, even if they are actively trying to avoid them.

6
  • I'd put a very large question mark over the recommendation of using Tor in a public place. You are far more physically surveillable. "Bob arrives at Starbucks, someone at Starbucks connects to Tor, Anonymous user session is observed on the internet, [session continues], Anonymous user session ends, someone at Starbucks disconnects from Tor, Bob leaves Starbucks.". Hammond would not have been saved by connecting from Starbucks, he was under physical surveillance, they could have followed him and disconnected him from the public wifi hotspot to perform the same attack and link the identities.
    – cacahuatl
    Commented Jun 4, 2016 at 1:10
  • That is exactly what my footnote addresses. I was careful in my answer to note
    – str4d
    Commented Jun 4, 2016 at 1:11
  • Not* recommend it, but merely point out that this is a valid concern with respect to keeping clearnet and Torified traffic separate.
    – str4d
    Commented Jun 4, 2016 at 1:12
  • Given that in some countries (mine, for example) there is a huge amount of CCTV camera surveillance, it would be trivial for law enforcement to retroactively review who was in or around all of the coffee shops or public places where Tor use correlated to the event they were investigating and find a common subject between them, assuming you didn't make the mistake of returning to the same watering hole (or soon-to-be honeypot) in the first place.
    – cacahuatl
    Commented Jun 4, 2016 at 1:15
  • I'm not disagreeing, it's a legitimate concern, I'm just unsure (thus question mark not "it's definitely wrong") of the practicality of this approach for most users and if it would provide an advantage or not.
    – cacahuatl
    Commented Jun 4, 2016 at 1:21
0

If I understand you right, you have Tor running on your computer. This can be either by using the Tor Browser Bundle or Tor as a stand-alone process. Now you are downloading a file with some download manager or check your mails.

When you have net set your clients (download manager, email client etc.) to use Tor, they will use your current Internet connection. So at least your provider will see what you are doing. Especially your real IP address will be exposed to your provider and to third parties (site where you download the file, mail provider etc.).

Your anonymity within Tor is usually not affected by 'outside' software like in the case you're describing. The software doesn't knwo about Tor and doesn't use it.

1
  • Yeah, I understand that. My question is that it won't compromise my anonymity WITHIN Tor, right? Commented Jan 23, 2014 at 10:05

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .