Questions tagged [attacks]

Attacks against the tor network or its participants, or attacks from it.

Filter by
Sorted by
Tagged with
11 votes
1 answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
pmocek's user avatar
  • 546
10 votes
5 answers
3k views

Is there a way to defend oneself against a timing attack?

Is there a way for an end user to protect oneself against the timing attack when using Tor? For those, who are not familiar with it, a timing attack involves an adversary populating the Tor cloud ...
v010dya's user avatar
  • 330
9 votes
6 answers
1k views

Releasing a controversial movie torrent using Tor Network for security

I live in a dictatorship and use the Tor Network to get around censorship. I read that Torrenting over Tor Network is not good because of high Internet usage and it slows everything down. For a short ...
AnonIris's user avatar
9 votes
1 answer
407 views

Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?

Assume someone wants to disrupt the Tor network or maybe bring it down. A powerful attacker could try to DDoS all the directory authorities. As there are only 10 worldwide this seems like an easy task....
Jens Kubieziel's user avatar
  • 8,570
9 votes
3 answers
5k views

How to tell my Tor Browser to use a certain relay as entry point?

I am running a Tor relay on a remote server that is hosted in a professional server farm about 1000 km away from my home. I am absolutely sure, that this Tor relay is secure because I am root on this ...
Hubert Schölnast's user avatar
8 votes
1 answer
102 views

Can intermediary nodes learn the length of a circuit?

This should be impossible because of the layered encryption, but some documentation suggests that this can somehow be done. From Section 5.6 [1] of tor's specification When speaking v2 of the link ...
user3117216's user avatar
7 votes
1 answer
403 views

List of attacks that try to trick browser to not use SOCKS/Tor

I've heard it called "disbanding" attacks where the attacker induces a client into not routing a connection over Tor. Basically all of the things that the TBB protects against. Examples might be ...
Lizbeth's user avatar
  • 1,264
6 votes
3 answers
5k views

Where is the Tor API documentation?

I want to have a program I'm writing interact with the Internet exclusively through Tor. After perusing the Tor project's documentation it appears that they do not specify the API anywhere i.e. how a ...
Friendly's user avatar
  • 215
6 votes
3 answers
1k views

How can Tor users and Tor Network protect themselves from an exit node that is actively logging or manipulating exit traffic?

Tor Exit nodes are the last hop in the circuit a Tor client establishes to reach a service in the Internet. Exit nodes handle the actual traffic of the client, either it's encrypted or not. That ...
alaf's user avatar
  • 2,536
6 votes
2 answers
542 views

Tor dying on Raspberry Pi (circuit creation storm, out of memory)

UPD: this question was regarding an older version of Tor (0.2.4.24). With a newer version (which was 0.2.7.2-alpha for me) the problem disappeared. I am running Tor (0.2.4.24) relay on Raspberry Pi (...
ilya's user avatar
  • 95
6 votes
1 answer
271 views

Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?

Assume an attacker with a record of Tor traffic between a client and guard has precomputed the 1024-bit Oakley group for Diffie-Hellman used in the TAP protocol. This would allow them to rapidly ...
forest's user avatar
  • 225
5 votes
4 answers
2k views

How safe are Tor users?

Given that Silk Road was just shut down, an article was published stating that: Tor Can't Always Keep You Safe; Just Ask Silk Road ... careful traffic monitoring and a little math you can figure ...
Josh Crozier's user avatar
5 votes
2 answers
896 views

Does Tor team have plans to implement post-quantum asymmetrical encryption schemes?

There is information that NSA is building quantum computer. Since it would make it possible to crack RSA using Shor's algorithm and we unlikely to know if they will successfully build it and start ...
Anonymous's user avatar
5 votes
1 answer
982 views

Why does TOR not intentionally choose nodes from different countries?

I've read than if an attacker could control both entry and exit node into the tor network he could easily de-anonymize TOR users. I have also read that TOR chooses nodes at random. So my question is ...
CuriousIndeed's user avatar
4 votes
1 answer
831 views

Would Tor remain anonymous in a post-quantum future?

I'm writing a near-future sci-fi novel where general quantum computing has been developed and SSL has been replaced with a security protocol based on quantum key distribution (QKD). Tor would still be ...
Allan Rempel's user avatar
4 votes
1 answer
820 views

How Guard Discovery attack in Tor network works?

How Guard Discovery attack works? What steps an attacker need to perform in order to discover the guard relay of the HS? How easy this attack can be realized in the real world? What are the ...
programings's user avatar
4 votes
3 answers
130 views

Multiple adversaries able to deploy large numbers of relays; do they dilute each other's effectiveness?

I note that when researchers analyse some particular types of attacks on Tor security, they assume a SINGLE adversary who is capable of deploying a significant number of relays that will eventually be ...
Quentin's user avatar
  • 41
4 votes
0 answers
117 views

Tor hiden service ratelimits

While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
Culture's user avatar
  • 41
4 votes
2 answers
261 views

Can Tor be relied on as a trustless service? And more

My question is going to be a bit amateurish (bear with me please) but I have read a fair bit of this: https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt [1] And it didn't answer it. My ...
user28329's user avatar
3 votes
2 answers
608 views

What is identity correlation?

Can you describe please, what identity correlation is referring to? Why should I care? How can it be prevented?
adrelanos's user avatar
  • 2,787
3 votes
1 answer
380 views

If all network traffic is being monitored, will Tor still be effective at anonymization?

During a panel at the 2014 SXSW conference, Julian Assange (founder of Wikileaks) stated "The ability to surveil everyone on the planet is almost there and, arguably, will be there in the next couple ...
Ivar's user avatar
  • 1,630
3 votes
1 answer
1k views

How does Tor defend against Sybil attacks?

Sybil attacks target the weaknesses in the reputation system. How does Tor deal with such attacks? Recently, the Lizard Squad tried to take control of the Tor network by creating a large number of ...
Linostar's user avatar
  • 1,133
3 votes
1 answer
440 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
guest9128379127934's user avatar
3 votes
2 answers
90 views

Is exit node able to modify / add packets to a stream?

Is it possible for an exit node to modify the data stream of a circuit, for example could a cell such as a padding cell be send down the stream after the data have been transmitted ? I am thinking ...
user2962401's user avatar
3 votes
1 answer
719 views

How to prevent a rogue Tor entry node?

The Tor system works by connecting to a Tor node. That Tor node then connects to a deeper Tor node, which connects to a deeper Tor node, which connects to an exit node. How do I know that there's no ...
bob's user avatar
  • 33
3 votes
1 answer
1k views

Ready-made Tor relay on virtual machine

I was looking for a virtual machine that has Tor relay pre-configured. This came to my mind while thinking about the the amount of security which can be provided by having thousands of similar Tor ...
Mehrad Mahmoudian's user avatar
3 votes
1 answer
2k views

Launching a Distributed Denial of Service attack on a hidden service

Recently, I have seen more and more forums, image boards, and market places that are shifting to Tor for the safety of their users. This undoubtedly brings the many attackers that dislike these ...
Aurora's user avatar
  • 189
3 votes
1 answer
486 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
user9609's user avatar
2 votes
2 answers
355 views

Is it safe to send identifying information unencrypted through Tor?

My question is similar to What's the extent of the problem of information leaking to exit node, but the answer there isn't sufficient for my question. If I send unencrypted information through Tor,...
nullUser's user avatar
  • 540
2 votes
2 answers
2k views

What impact does Tor's bootstrapping process have for attack models?

As I understand it, Tor nodes and clients bootstrap themselves by contacting over the regular internet some hard-coded addresses to get basic network information. What are the effects of this design ...
Megan Walker's user avatar
  • 2,610
2 votes
2 answers
433 views

What would happen if directory authorities were compromised or taken down?

If many directory authorities are compromised or offline, is it still safe to use Tor? What are security and anonymity consequences for Tor users of such an attack on directory authorities?
Roya's user avatar
  • 3,228
2 votes
1 answer
168 views

What prevents directory server from being attacked?

I understand that the first thing a Tor user do is connect to a directory server to obtain a list of tor nodes, which can be found here: https://atlas.torproject.org/#search/flag:authority What ...
user153882's user avatar
2 votes
2 answers
866 views

Are low bandwidth DoS attacks performed over the Tor network a problem to be considered?

For low bandwidth and slow DoS / DDoS attacks (for example Slowloris, SlowLoris and PyLoris) the Tor network seems to be very useful medium. For free it offers two important things to the attacker: ...
pabouk - Ukraine stay strong's user avatar
2 votes
2 answers
232 views

Tor safe when taking future in to account?

With quantum computing becoming better by the day I have a few questions. How viable and likely is it that an adversary to saves all tor traffic in order to decrypt it at a later date? When ...
Storm-e's user avatar
  • 21
2 votes
1 answer
162 views

Whonix Workstation Country Code

Should I be concerned about the timezones in my custom whonix workstations (arch, ubuntu, kali)? Installation mediums always ask for my country code. I usually pick a random one. When building ...
user16951's user avatar
2 votes
3 answers
681 views

What happens when Tor always chooses the same path?

What weakness would this expose? It doesn't seem obvious that there would be any apparent way to attack.
Mark's user avatar
  • 121
2 votes
2 answers
2k views

How can one avoid Tor correlation attacks?

People usually recommend either using a VPN or hosting an entry or exit node in a remote server. But what about proxies and bridges, for example? And are there any other way to avoid correlation ...
Daniel Maia's user avatar
2 votes
1 answer
553 views

Why do entry nodes not know the originator?

I stumbled upon the following text in the article about onion routing on Wikipedia: In this example onion, the source of the data sends the onion to Router A, which removes a layer of encryption ...
Tor User's user avatar
2 votes
0 answers
137 views

What kinds of attack can a bridge carry out?

I have been recently doing some research on anonymity implications of using a bridge, and wrote a tool (not very well written though) for setting up a malicious bridge node. However, I am not clear ...
nobody's user avatar
  • 725
1 vote
4 answers
172 views

Relay streaming a large file

I wanted to download a file of considerable size, let us say 10GB and I sent the GET request to a web server to download that file. I then would get downloaded through the Tor network, through the ...
user1892955's user avatar
1 vote
1 answer
225 views

List of attacks on Tor

I'm studying Tor for educational purposes and I haven't been able to find many resources about attacks on Tor (even the once that have been patched). Most of the articles are too general or don't ...
kytka's user avatar
  • 25
1 vote
2 answers
2k views

public key not found

Good time of the day! I downloaded Tor source code and the signature on a new board, started to check it - and it does not verify! OS is Armbian, no GPG-stuff was ever performed on the installation, i....
Alexey Vesnin's user avatar
  • 6,023
1 vote
2 answers
128 views

On Dec 26 2014 the number of relays have increased from 6700 range to 10000 range overnight. What is going on?

The number of relays have suddenly increased from 6700 range to 10000 range in a very short period of time. What is going on?
Roya's user avatar
  • 3,228
1 vote
1 answer
253 views

Is Tor network making any noise to confuse global adversaries?

Is Tor use any steganography methods to hide connections inside onion routing? I found this question on security SE: Tor traffic correlation attacks by global adversaries adversaries (like the NSA)...
ConcealmEnt's user avatar
1 vote
1 answer
245 views

What events led to Freedom Hosting going down? [closed]

Freedom Hosting was one of the largest .onion website hosts until it suddenly started serving malicious code, and eventually went offline (presumably permanently). What was the sequence of events ...
Megan Walker's user avatar
  • 2,610
1 vote
1 answer
113 views

Are the LinkWidth attacks still a threat?

Recently i have found a pdf talking about an attack using so-called “LinkWidth” against tor network, here it is https://pdfs.semanticscholar.org/aa31/f6e8676e6c1a531854e4337649f0556e9280.pdf The ...
DeepFriedOnionRing's user avatar
1 vote
1 answer
69 views

Malicious Exit Nodes in network sensor [closed]

I run an onion pi (a wireless router that redirects all of my traffic over tor, here's a how to) Anyways I installed maltrail on my onion pi to see what's going on; found these exit nodes scanning my ...
Geraldo Delacruz's user avatar
1 vote
1 answer
226 views

Security for relay on Home network

I want to host a relay to help out the network. I am looking into the possibility of doing it on my home network. Two concerns have come up during my research. The first is I would potentially be ...
Charles S's user avatar
  • 283
1 vote
1 answer
670 views

TOR traffic correlation: how quickly can you be de-anonymized?

I know that statistical analysis of the data entering and leaving the TOR network can be used to de-anonymise users given enough time. http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf How ...
husky's user avatar
  • 21
1 vote
1 answer
153 views

How do bridges defend themselves against targeted scans?

Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required. Assuming someone runs obfs4 and a ...
meee's user avatar
  • 1,202