Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [attacks]

The tag has no usage guidance.

0
votes
0answers
16 views

Which BIOS/motherboard is the most secure from “LightEater” or other hacks?

For reasons in the below article, we NOW need to protect our BIOS! How can we do this? “Although most BIOS have protections to prevent unauthorized modifications, the researchers were able to bypass ...
0
votes
1answer
80 views

I got effected by GANDCRAB ransomeware and all my files & documents got encrypted and .WRCOR file extension got added orginal file name

All my files & documents got encrypted and appended with file extension .wrcor. I was accessing a file from Tor browser. Suddenly I saw my files got converted and encrypted. Al the original file ...
0
votes
1answer
45 views

Protect against pseudonymous identity activity on a forum and traffic correlation?

I use Tor when I need to use a pseudonymous account on a forum. A observer can see when I connect to Tor and correlate with activity of the account from the forum How I can protect against this ?
2
votes
0answers
48 views

What kinds of attack can a bridge carry out?

I have been recently doing some research on anonymity implications of using a bridge, and wrote a tool (not very well written though) for setting up a malicious bridge node. However, I am not clear ...
1
vote
1answer
138 views

Why does TOR not intentionally choose nodes from different countries?

I've read than if an attacker could control both entry and exit node into the tor network he could easily de-anonymize TOR users. I have also read that TOR chooses nodes at random. So my question is ...
0
votes
0answers
25 views

Saw the green notice and downloaded 7.5.1 Norton stopped it; said only 1 week old not safe. I need Tor! This has never happened!

Downloaded (attempted to) 7.5.1. Norton stopped it saying not safe, only one week old and just five users. I cannot get the 7.5 to work now in the interim. I want my Tor and regret jumping on the ...
0
votes
0answers
28 views

Is there a simple way to withstand a Tor correlation attack? [duplicate]

Suppose my opponent watches the traffic between my provider and the first relay in the chain and also between the output relay and the website that I visit. Is there a simple way in this case to make ...
0
votes
0answers
31 views

osiris ransomware [duplicate]

My computer was infected by ransomware (Osiris). The scumbags who did this recommend downloading your software as a start to clear the virus and get files back. Are you related to these criminals? How ...
0
votes
1answer
84 views

Are the LinkWidth attacks still a threat?

Recently i have found a pdf talking about an attack using so-called “LinkWidth” against tor network, here it is https://pdfs.semanticscholar.org/aa31/f6e8676e6c1a531854e4337649f0556e9280.pdf The ...
-1
votes
1answer
336 views

Stopping a DDoS attack on Tor daemon

I've already check How to protect a hidden service against DDOS attack? and How to deal with DDOS attacks? and How to mitigate layer 7 attacks on hidden services?. The problem is not DDoS of web ...
0
votes
1answer
111 views

Simulating Correlation attacks on Tor using Shadow

Is it possible to simulate correlation attacks on Tor using Shadow? If it's possible what's the easiest way to implement it? If it's not possible, then is there any other simulators that can be used ...
0
votes
1answer
396 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
1
vote
0answers
29 views

Noise sender function in TOR?

Does TOR have the service of contacting me with x bytes of noise and ignore the garbage I return? Background I recently heard a talk about a company that is privacy aware. They run smart ...
0
votes
0answers
76 views

How to properly sign some message using hidden service private key and then check this signature using hidden service public key?

Famous Russian anonymous board Runion (lwplxqzvmgu43uff.onion) is down because a DDoS. So, i want to develop an application called "onioncannon" that makes onion services more accessible in ...
2
votes
2answers
569 views

How can one avoid Tor correlation attacks?

People usually recommend either using a VPN or hosting an entry or exit node in a remote server. But what about proxies and bridges, for example? And are there any other way to avoid correlation ...
3
votes
1answer
163 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
0
votes
2answers
462 views

public key not found

Good time of the day! I downloaded Tor source code and the signature on a new board, started to check it - and it does not verify! OS is Armbian, no GPG-stuff was ever performed on the installation, i....
3
votes
1answer
278 views

Why do entry nodes not know the originator?

I stumbled upon the following text in the article about onion routing on Wikipedia: In this example onion, the source of the data sends the onion to Router A, which removes a layer of encryption ...
1
vote
0answers
56 views

Can someone explain this?

Can someone please explain this? still unfamiliar i mean this ip's looks suspicious is this a ddos attack?m new to relay operating so please explain thank you.
3
votes
1answer
82 views

Whonix Workstation Country Code

Should I be concerned about the timezones in my custom whonix workstations (arch, ubuntu, kali)? Installation mediums always ask for my country code. I usually pick a random one. When building ...
3
votes
1answer
72 views

What prevents directory server from being attacked?

I understand that the first thing a Tor user do is connect to a directory server to obtain a list of tor nodes, which can be found here: https://atlas.torproject.org/#search/flag:authority What ...
2
votes
0answers
68 views

Tor Brower Compromised?

My firewall is configured to warn me of any changes to my tor browser when I'm on line. It also lists the ip address and the originating website. Recently, it detected a change which was initiated ...
0
votes
1answer
138 views

Was I attacked or my identity found out?

I am new to TOR and not very tech savvy. While using TOR to set up an email account, I found that I had to constantly to solve puzzles for verification. Sometimes websites would not allow me access, ...
0
votes
0answers
107 views

How does selecting new guard relays work?

I've been told guards are selected when a client first connects to the Tor network and used until they disappear. What constitutes disappearing? Do all guards need to disappear (and then the whole ...
0
votes
0answers
107 views

How exactly does running a relay provide better anonymity?

Specifically, I'm confused about the following claim from the Tor website about how running a relay can enhance your anonymity: "The simplest example is an attacker who owns a small number of Tor ...
1
vote
1answer
55 views

Malicious Exit Nodes in network sensor [closed]

I run an onion pi (a wireless router that redirects all of my traffic over tor, here's a how to) Anyways I installed maltrail on my onion pi to see what's going on; found these exit nodes scanning my ...
0
votes
1answer
30 views

Does a tor message keep track of number of nodes it's gone through?

Let's say you have a message. Does it include the number of hops it has passed through? If no, what is stopping it from just being passed around indefinitely and never reaching an exit node? If yes, ...
3
votes
0answers
198 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
1
vote
1answer
170 views

Security for relay on Home network

I want to host a relay to help out the network. I am looking into the possibility of doing it on my home network. Two concerns have come up during my research. The first is I would potentially be ...
1
vote
1answer
297 views

TOR traffic correlation: how quickly can you be de-anonymized?

I know that statistical analysis of the data entering and leaving the TOR network can be used to de-anonymise users given enough time. http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf How ...
7
votes
1answer
319 views

List of attacks that try to trick browser to not use SOCKS/Tor

I've heard it called "disbanding" attacks where the attacker induces a client into not routing a connection over Tor. Basically all of the things that the TBB protects against. Examples might be ...
1
vote
1answer
187 views

Hidden Service as client or relay?

Take a look, what is the difference between Tor-Browser in onion encrypted traffic and Apache service responses in onion encrypted traffic? Tor-Browser: sent 1% / receive 99%. It is simply, ...
1
vote
1answer
93 views

How do bridges defend themselves against targeted scans?

Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required. Assuming someone runs obfs4 and a ...
1
vote
1answer
424 views

How can I randomize the entry guard?

Tor is moving to a single entry node implementation (#11480). I think that's because it's statistically feasible for an adversary to deploy entry and exit nodes and perform a correlation attack by ...
3
votes
1answer
630 views

How does Tor defend against Sybil attacks?

Sybil attacks target the weaknesses in the reputation system. How does Tor deal with such attacks? Recently, the Lizard Squad tried to take control of the Tor network by creating a large number of ...
8
votes
2answers
384 views

Tor dying on Raspberry Pi (circuit creation storm, out of memory)

UPD: this question was regarding an older version of Tor (0.2.4.24). With a newer version (which was 0.2.7.2-alpha for me) the problem disappeared. I am running Tor (0.2.4.24) relay on Raspberry Pi (...
3
votes
2answers
64 views

Is exit node able to modify / add packets to a stream?

Is it possible for an exit node to modify the data stream of a circuit, for example could a cell such as a padding cell be send down the stream after the data have been transmitted ? I am thinking ...
2
votes
0answers
22 views

Final relay able to encrypt data to the client? [duplicate]

Have been reading the one cell is enough to break anonymity paper, and just have a question. Once a circuit has been successfully created, can the final node of the circuit encrypt a piece of data ...
3
votes
1answer
636 views

Ready-made Tor relay on virtual machine

I was looking for a virtual machine that has Tor relay pre-configured. This came to my mind while thinking about the the amount of security which can be provided by having thousands of similar Tor ...
1
vote
2answers
112 views

On Dec 26 2014 the number of relays have increased from 6700 range to 10000 range overnight. What is going on?

The number of relays have suddenly increased from 6700 range to 10000 range in a very short period of time. What is going on?
3
votes
1answer
1k views

Launching a Distributed Denial of Service attack on a hidden service

Recently, I have seen more and more forums, image boards, and market places that are shifting to Tor for the safety of their users. This undoubtedly brings the many attackers that dislike these ...
1
vote
2answers
146 views

What would happen if directory authorities were compromised or taken down?

If many directory authorities are compromised or offline, is it still safe to use Tor? What are security and anonymity consequences for Tor users of such an attack on directory authorities?
0
votes
2answers
212 views

Warning!!! Many of directory authorities are compromised and taken down, This is a horrendous security risk, Who has done it and why? [closed]

Warning!!! It appears that many Directory authorities are compromised and taken down, This is a horrendous security risk, Who has done it and Why? There are currently 9 directory authorities. More ...
3
votes
1answer
399 views

How Guard Discovery attack in Tor network works?

How Guard Discovery attack works? What steps an attacker need to perform in order to discover the guard relay of the HS? How easy this attack can be realized in the real world? What are the ...
5
votes
2answers
261 views

Does Tor team have plans to implement post-quantum asymmetrical encryption schemes?

There is information that NSA is building quantum computer. Since it would make it possible to crack RSA using Shor's algorithm and we unlikely to know if they will successfully build it and start ...
7
votes
3answers
3k views

How to tell my Tor Browser to use a certain relay as entry point?

I am running a Tor relay on a remote server that is hosted in a professional server farm about 1000 km away from my home. I am absolutely sure, that this Tor relay is secure because I am root on this ...
3
votes
1answer
478 views

How to prevent a rogue Tor entry node?

The Tor system works by connecting to a Tor node. That Tor node then connects to a deeper Tor node, which connects to a deeper Tor node, which connects to an exit node. How do I know that there's no ...
4
votes
3answers
85 views

Multiple adversaries able to deploy large numbers of relays; do they dilute each other's effectiveness?

I note that when researchers analyse some particular types of attacks on Tor security, they assume a SINGLE adversary who is capable of deploying a significant number of relays that will eventually be ...
9
votes
1answer
71 views

Can intermediary nodes learn the length of a circuit?

This should be impossible because of the layered encryption, but some documentation suggests that this can somehow be done. From Section 5.6 [1] of tor's specification When speaking v2 of the link ...
8
votes
6answers
667 views

Releasing a controversial movie torrent using Tor Network for security

I live in a dictatorship and use the Tor Network to get around censorship. I read that Torrenting over Tor Network is not good because of high Internet usage and it slows everything down. For a short ...