Questions tagged [deanonymization]

De-anonymization (also spelt as deanonymization) is a strategy in data mining in which anonymous data is cross-referenced with other sources of data to re-identify the anonymous data source.

Filter by
Sorted by
Tagged with
0 votes
1 answer
76 views

And if DDoS attacks could enhance the anonymity of the Tor network?

The most effective approach for an attacker would be to establish Tor routing and send packets to trigger a chain reaction across 3 or more relays. Now, couldn’t these attacks potentially be an ...
setnit6's user avatar
0 votes
0 answers
55 views

How to calculate the number of IPs an overall passive attacker would obtain by examining a connection?

A global passive attacker might be able to attempt various correlation attacks. In this example, I would like to calculate the number of IPs they would need to collect in order to have the IP address ...
setnit6's user avatar
0 votes
1 answer
97 views

Can a Hidden Service track you the same way an exit node can?

imagine if the onion service decided to be the malicious exit node itself. It’s not (Exit node) but could it travel back through its relays (possibly even skip) to the rendezvous point that track you ...
LimelightFaygo's user avatar
0 votes
0 answers
60 views

Torben attack mitigation and prevention

The full name of the research paper is "Torben: A Practical Side-Channel Attack for Deanonymizing Tor Communication". Link This is subtype of website fingerprinting attack that uses traffic ...
MRoy's user avatar
  • 1
0 votes
0 answers
22 views

Does Tor prevent circuit construction over the same Autonomous System?

I understand that Tor client cannot build a circuit that use 2 or more onion routers inside the same /16 prefix. But many ASes are not limited to this exact IP prefix, and even a single organization ...
MRoy's user avatar
  • 1
0 votes
1 answer
31 views

Does a "deep inspecting" firewall or proxy at the initiator's site compromise anonymosity?

I wonder: If I use a tor connection (e.g. by using Tor Browser) on a site where there is a "deep inspecting" firewall or proxy that "breaks" SSL encryption, am I still anonymous ...
U. Windl's user avatar
  • 141
0 votes
1 answer
194 views

Tor Downloads/ Anonymity

I had a question regarding Downloading files Using the Tor software . Lets say you are a journalist and you were on some website on TOR (like a .onion) and you needed to download standard MP4/ PNG/ ...
Asked if Questions's user avatar
0 votes
0 answers
97 views

Tor over Tor: Is it really risky?

I would like to discuss about the different tor config for achieving a better anonymity and prevent or making harder a de-anonymize attack (via tor-nodes by correlating traffic from user to endpoint) ...
saydehimle's user avatar
2 votes
1 answer
152 views

Has there ever been a severe correlation attack in onion routing?

I was reading about vulnerabilities of onion routing and stumbled across correlation attack. From what I understand, it's possible for authorities to setup some effective analysis program, and de-...
Best Quality Vacuum's user avatar
1 vote
1 answer
260 views

How was YouTube able to deanonymize Tor?

I was using the Tor browser (in safer mode in tails-5.2 with default settings, with no addon or any modification) to browse YouTube. While I was searching for Python tutorials, it offered that in the ...
max's user avatar
  • 11
1 vote
0 answers
96 views

Isn't deanonymization by having the entry and exit nodes in the same country a threat?

Consider the following scenario. I live in a repressive state A. On the other hand, the citizens of state A operate many Tor nodes. I am trying to call for demonstrations and criticize policies on ...
groscean's user avatar
0 votes
1 answer
139 views

Does clicking on "new circuit for this site" too often risk deanonymization?

I have a (probably stupid) quirk/OCB: When I want my traffic to a website to be particularly hard to backtrace, I click dozens of times on the new circuit for this site button (sometimes for >15 ...
summerrain's user avatar
0 votes
1 answer
338 views

How to get an anonymous phone number to make an account on Tor?

I am involved in some activism work against a powerful group that is known to use threats against its opponents. As a result, many activists have been silenced and quit working against said powerful ...
toruser9218's user avatar
0 votes
0 answers
87 views

Can hidden services be de-anonymized with little or considerable control of relay nodes and /or by network monitoring?

There are multiple papers detailing the de-anonymization approaches. But what i have observed is that (1) 100% de-anonymization may not be possible (2) Even if its possible, one need to control lot ...
Benni 's user avatar
  • 16
0 votes
1 answer
649 views

Has anyone attempted to deanonymze users using the Tor network?

Some people might benefit if they can deanonymze Tor users - law enforcement could catch criminals faster if they had control of the Tor network. Hackers also might want to deanonymze Tor users. But ...
user avatar
0 votes
1 answer
1k views

Tor browser's default theme uses os's color scheme. Is it fine? Can this be used for fingerprinting?

Tor browser's default theme uses os's color scheme. Just like firefox. If os is set to dark grey colors lets say, tor uses the same palette. If os is set to shades of black, tor uses the same palette ...
guest's user avatar
  • 1
0 votes
1 answer
291 views

Can captchas expose hidden services? And how?

I heard that the server location of the Silk Road hidden service was caught by employing an IP leak caused by a Captcha prompt on the site's login page. That got me a little confused. Aren't captchas ...
Swangie's user avatar
  • 984
0 votes
1 answer
197 views

Can Tor browser redirect extension trafic?

While extensions can deanonymize you in many ways, one of the worst ways they can expose you is if they connect to the internet but not over the Tor network and reveal your IP address. So would it ...
Swangie's user avatar
  • 984
1 vote
0 answers
177 views

How do onion services host anonymous chatrooms and what level of anonymity is present when using one?

There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
Swangie's user avatar
  • 984
0 votes
1 answer
355 views

What's so bad about using Tor from home?

If Tor browser anonymizes our IP address, why go to extra lengths to not use Tor from home? What added benefit does going to a public wi-fi hotspot even provide a Tor user? Does it simply defend ...
user610620's user avatar
1 vote
1 answer
2k views

Does Tor Browser get a unique fingerprint with JavaScript, even if HTML5 Canvas data is blocked (amiunique.org)?

Tor Browser settings Security slider is on "Safest" JavaScript is enabled (otherwise no Canvas fingerprint possible by site) "Extract Canvas Data" is blocked: Issue amiunique....
cane_xmx3's user avatar
0 votes
0 answers
125 views

Device spoofing, instead of MAC address spoofing

Besides MAC address spoofing, how can device name, device brand, and device type spoofing (randomization?) be done on a Tails (windows) system, so that WLAN hotspot hosts see different information ...
user610620's user avatar
-1 votes
1 answer
116 views

Why does the TOR browser bundle disclose my location

All sites visited using the TOR browser bundle correctly identify the country from where I'm accessing the internet. Why is that and how can I prevent this?
david's user avatar
  • 109
1 vote
2 answers
526 views

Tor deanonymization via ISPs

We known that an adversary can deanonymize a user (on clearnet) if it controls both the guard and the exit node. But is that neccesary? We know that the NSA gets huge amounts of data from the internet....
sksioaa's user avatar
  • 11
0 votes
1 answer
72 views

Increase max allowable delay

1 attack is timing correlation attack. How can I increase the max allowable delay for requests between my computer, guard nodes, exit nodes, website?
guest's user avatar
  • 1
0 votes
2 answers
97 views

Can legit antivirus spying on user when ''accessibility-services'' in Tor are turned off and onion routing using?

I use one of the most popular antivirus program for Windows for months and some days ago I just noticed that it at least uses firewall and ''internet security and protection'' settings turned on and ...
NGoni2's user avatar
  • 1
0 votes
1 answer
391 views

Can global adversaries 'de-anonymize' any TOR user in a day?

https://security.stackexchange.com/questions/48502/tor-traffic-correlation-attacks-by-global-adversaries I know what traffic correlation attack is but I find it hard to understand this article or how ...
randoman's user avatar
1 vote
1 answer
95 views

JUMPSHOT/AVAST and TOR

I guess that by now some of you have seen Vice's article on AVAST and how they are basically mining everything going on in your browsers. If not you can read and be afraid here: https://www.vice.com/...
Micael's user avatar
  • 11
4 votes
2 answers
255 views

Can Tor be relied on as a trustless service? And more

My question is going to be a bit amateurish (bear with me please) but I have read a fair bit of this: https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt [1] And it didn't answer it. My ...
user28329's user avatar
0 votes
1 answer
576 views

How can deanonymize me? vpn tor vpn

I want to use connection vpn1 - tor - vpn2, where vpn1 and vpn2 I will buy with openvpn connection more likely, entry node of tor will be on my raspberry pi (in my home) with disabled logs, I'm going ...
vpntorvpn01's user avatar
1 vote
1 answer
306 views

Why guard and exit nodes are allowed to be from same country?

If one's connection is corrupted when your guard and exit node is the same person (that can then analyze your traffic and based on that figure out your IP), why does Tor allow them to be from the same ...
Matas Vaitkevicius's user avatar
0 votes
1 answer
2k views

Is tor browser and anon surf both the same?

I am very new to using proxy chains, and since I was worried about messing up while setting up a proper proxy chain I have been using tor browser. Is using tor browser same as using proxy chain using ...
Sai Kumar's user avatar
  • 101
1 vote
2 answers
230 views

Increasing number of middle relays weakens the anonymity?

Tor nodes build encrypted TLS sessions between neighbors to multiplex circuits of users. Multiplexing helps to anonymize users (?). With an increasing number of middle relays multiplexing becomes ...
user674907's user avatar
0 votes
0 answers
183 views

Track Tor circuit via ISP logs

I have some question about the very basics of tor, as this keeps bugging me now for some time: As far as I know every tor node is only aware of the ip address of the following node. For example the ...
Lord Vapor's user avatar
0 votes
1 answer
1k views

Excluding Entry Guard Node's Country from Exit Node?

With the way Tor works, you are tied to a fixed Entry Guard for quite a reasonable time. If you are unlucky, you might get connected to a bad Entry Guard Node owned by X. From now on, it is only a ...
PomBa76's user avatar
3 votes
0 answers
359 views

De-anonymization in Tor, just a matter of time?

Simple question. Doesn't the way Tor works make a de-anonymization more likely the longer you use/run Tor? From my understanding, you are fully de-anonymized when X controls both Entry Guard Node ...
PomBa76's user avatar
  • 31
1 vote
1 answer
212 views

Does deanonymization only affect the current session?

Say I'm using Tor, and I make an error by, for example, logging into an account on a website. Will this deanonymization only affect my current session, since I can just restart my browser and get a ...
SilverWolf's user avatar
1 vote
0 answers
181 views

How dangerous is to allow Google javascript?

I know it's dangerous to allow javascript on some website. But very often if you want to register on a website you need to type captcha. If you want to see captcha you need to allow javascript from ...
user22801's user avatar
1 vote
1 answer
291 views

How this website see Real location?

The website xvideos.com see your real location ( in left top side the icon of your real locations it's showed ) even with Safest Security Level Why ?
eqw's user avatar
  • 11
0 votes
1 answer
88 views

Protect against pseudonymous identity activity on a forum and traffic correlation?

I use Tor when I need to use a pseudonymous account on a forum. A observer can see when I connect to Tor and correlate with activity of the account from the forum How I can protect against this ?
user22668's user avatar
2 votes
0 answers
136 views

What kinds of attack can a bridge carry out?

I have been recently doing some research on anonymity implications of using a bridge, and wrote a tool (not very well written though) for setting up a malicious bridge node. However, I am not clear ...
nobody's user avatar
  • 725
5 votes
1 answer
950 views

Why does TOR not intentionally choose nodes from different countries?

I've read than if an attacker could control both entry and exit node into the tor network he could easily de-anonymize TOR users. I have also read that TOR chooses nodes at random. So my question is ...
CuriousIndeed's user avatar
0 votes
1 answer
246 views

Why do bridges hide that I am using Tor?

I read that using bridges lets you access websites that (soft)block Tor (e.g. Google) and it really does, but the bridge is the first node in your circuit so why don't website block based on the exit ...
Nesa's user avatar
  • 101
0 votes
1 answer
351 views

Jquery and bootstrap risk for Tor Hidden service

If you make a tor hidden service which has scripts and CSS (the whole core) of bootstrap and the whole Jquery library in the server (and included in the pages). Can you deanonymize the tor hidden ...
NetCoder's user avatar
1 vote
1 answer
109 views

Clearing the state of rendezvous client provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
nopara73's user avatar
  • 173
1 vote
1 answer
334 views

Clearing the client side DNS cache provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
nopara73's user avatar
  • 173
3 votes
1 answer
811 views

Signal NEWNYM vs Stream isolation

Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
nopara73's user avatar
  • 173
0 votes
1 answer
3k views

Download large files over tor?

If I download a large (3GB) file using torsocks like so: torsocks wget http://website.com/largefile.txt Will tor change the Exit IP every x minutes for the duration of the download or will it ...
user20476's user avatar
2 votes
1 answer
1k views

Checking for DNS leak on TOR router

I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
user7071120's user avatar
2 votes
3 answers
531 views

Is this setup to send anonymous email secure?

I am working for a company that engages in unethical business practices with a customer. I need to send an anonymous email to the labor board and the customer. I need to keep my identity a secret, but ...
jkwon's user avatar
  • 21