Questions tagged [deanonymization]

De-anonymization (also spelt as deanonymization) is a strategy in data mining in which anonymous data is cross-referenced with other sources of data to re-identify the anonymous data source.

Filter by
Sorted by
Tagged with
2
votes
1answer
329 views

Why does TOR not intentionally choose nodes from different countries?

I've read than if an attacker could control both entry and exit node into the tor network he could easily de-anonymize TOR users. I have also read that TOR chooses nodes at random. So my question is ...
1
vote
1answer
118 views

Does deanonymization only affect the current session?

Say I'm using Tor, and I make an error by, for example, logging into an account on a website. Will this deanonymization only affect my current session, since I can just restart my browser and get a ...
1
vote
1answer
95 views

Increasing number of middle relays weakens the anonymity?

Tor nodes build encrypted TLS sessions between neighbors to multiplex circuits of users. Multiplexing helps to anonymize users (?). With an increasing number of middle relays multiplexing becomes ...
4
votes
3answers
2k views

Can tor nodes (entry, exit, others) store IPs?

I'm a new Tor user. And I want to ensure several questions. Can "entry point" router store my IP? Can "middle relay" store "entry point" IP? Can "exit point" router store "middle relay" IP? I think ...
0
votes
1answer
250 views

Excluding Entry Guard Node's Country from Exit Node?

With the way Tor works, you are tied to a fixed Entry Guard for quite a reasonable time. If you are unlucky, you might get connected to a bad Entry Guard Node owned by X. From now on, it is only a ...
1
vote
1answer
83 views

Why guard and exit nodes are allowed to be from same country?

If one's connection is corrupted when your guard and exit node is the same person (that can then analyze your traffic and based on that figure out your IP), why does Tor allow them to be from the same ...
0
votes
1answer
103 views

Is tor browser and anon surf both the same?

I am very new to using proxy chains, and since I was worried about messing up while setting up a proper proxy chain I have been using tor browser. Is using tor browser same as using proxy chain using ...
0
votes
0answers
30 views

How does the loopback provide no deanonymizing information?

On page 99 of the book "Practical Anonymity: Hiding in Plain Sight Online", there's this passage about HiddenServicePort: Generally, you would to keen the hidden service address as the loopback ...
0
votes
0answers
70 views

Track Tor circuit via ISP logs

I have some question about the very basics of tor, as this keeps bugging me now for some time: As far as I know every tor node is only aware of the ip address of the following node. For example the ...
2
votes
0answers
142 views

De-anonymization in Tor, just a matter of time?

Simple question. Doesn't the way Tor works make a de-anonymization more likely the longer you use/run Tor? From my understanding, you are fully de-anonymized when X controls both Entry Guard Node ...
2
votes
1answer
776 views

Checking for DNS leak on TOR router

I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
1
vote
1answer
203 views

How this website see Real location?

The website xvideos.com see your real location ( in left top side the icon of your real locations it's showed ) even with Safest Security Level Why ?
1
vote
0answers
96 views

How dangerous is to allow Google javascript?

I know it's dangerous to allow javascript on some website. But very often if you want to register on a website you need to type captcha. If you want to see captcha you need to allow javascript from ...
2
votes
3answers
490 views

Does it matter when you connect to TOR?

Does it matter when you connect to TOR Network ? 2 cases: 1. You connect to TOR after 10 minutes after you connect to your real facebook/bank/email account. Is it harmfull to connect to TOR as like ...
0
votes
1answer
58 views

Protect against pseudonymous identity activity on a forum and traffic correlation?

I use Tor when I need to use a pseudonymous account on a forum. A observer can see when I connect to Tor and correlate with activity of the account from the forum How I can protect against this ?
0
votes
1answer
681 views

Download large files over tor?

If I download a large (3GB) file using torsocks like so: torsocks wget http://website.com/largefile.txt Will tor change the Exit IP every x minutes for the duration of the download or will it ...
2
votes
0answers
74 views

What kinds of attack can a bridge carry out?

I have been recently doing some research on anonymity implications of using a bridge, and wrote a tool (not very well written though) for setting up a malicious bridge node. However, I am not clear ...
0
votes
1answer
102 views

Why do bridges hide that I am using Tor?

I read that using bridges lets you access websites that (soft)block Tor (e.g. Google) and it really does, but the bridge is the first node in your circuit so why don't website block based on the exit ...
0
votes
1answer
156 views

Jquery and bootstrap risk for Tor Hidden service

If you make a tor hidden service which has scripts and CSS (the whole core) of bootstrap and the whole Jquery library in the server (and included in the pages). Can you deanonymize the tor hidden ...
3
votes
1answer
342 views

Signal NEWNYM vs Stream isolation

Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
1
vote
1answer
51 views

Clearing the state of rendezvous client provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
1
vote
1answer
159 views

Clearing the client side DNS cache provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
2
votes
4answers
5k views

Can HTML5 canvas image data reveal the users IP?

I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
3
votes
2answers
427 views

Are .onion addresses leak-proof?

I want to perform tasks other than web browsing over Tor, for example XMPP chat. I don't want to have to rely on a Tor implementation in the applications themselves, but I do want to avoid leaking my ...
1
vote
2answers
374 views

Is this setup to send anonymous email secure?

I am working for a company that engages in unethical business practices with a customer. I need to send an anonymous email to the labor board and the customer. I need to keep my identity a secret, but ...
2
votes
1answer
279 views

Hostname Hacking

How do I protect against this vulnerability? https://mascherari.press/dark-web-diaries-hostname-hacking/ > torify curl -H 'Host: localhost' http://myonionaddress.onion It reveals another onion ...
1
vote
0answers
1k views

Why people advice to use Riseup.net and SecurityKISS VPN? [closed]

As I see here people always advice to use Riseup.net VPN or SecurityKISS. I just want to ask why people here advice soo much to use that 2 vpns and what are their pros compared to other VPN's. As I ...
0
votes
1answer
122 views

Hacking Tor through RAM

Is it possible to identify the middle router by extracting data from the RAM of the exit router?
1
vote
1answer
306 views

A server behind a physical Tor gateway to hide its location

Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access? In my world-...
1
vote
2answers
178 views

Should use same ISP for Tor and Real life?

Should I use same ISP for connecting to Tor and for connecting to my real life sites like email and other sites where my Last Name and First Name figure ? I know about VPNs, Bridges and other things ...
1
vote
1answer
77 views

Double connection to Tor from one IP

Is there any security issues or deanonymise techniques when a user use Tor from his tablet and from his Notebook at same moment ? Same question "Is there any security issues or deanonymise ...
1
vote
0answers
243 views

Clarification of Risks to Anonymity [closed]

My goal is to get a clear sense of what is required to maintain anonymity. In a sense I'm mapping the flow of traffic in my head and trying to understand how certain traffic might interact in ways ...
1
vote
1answer
213 views

Does cross-browser fingreprinting work in Tor Browser?

https://thehackernews.com/2017/02/cross-browser-tracking.html describes a a cross-browser fingerprinting technique. What can Tor Browser can do to defeat this?
1
vote
2answers
287 views

How do we find out the identities of online scammer(s) who used TOR?

A TOR node http://85.93.218.204/ was used for an online scam and more than 20 falilies were involved. How can we uncover identifiable information (such as IP addresses, devices and etc) of these ...
1
vote
0answers
79 views

Using bridges don't hide using TOR, is it okay? [closed]

Good day, Using bridges don't hide using TOR, is it okay? If the question is stupid, sorry) To check it - whoer helped. If it's normal situation, please, advise smth. that can hide it absolutely, ...
1
vote
1answer
188 views

Flash Player usage

Just started with Tor yesterday. I understand downloading and using Tor means no longer having Flash Player and the reasons why, BUT...when using online sites like PicMonkey (which I use for my work) ...
26
votes
2answers
2k views

How strong is the anonymity of a hidden service compared to an average Tor client? How much easier is it to learn the Hidden Service's IP address?

Another way of putting this: How hard would it be to de-anonymize a hidden service? By "de-anonymize" I mean revealing the IP address of whatever server the hidden service is hosted on. Of course, ...
2
votes
1answer
477 views

Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation? [closed]

In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that ...
1
vote
1answer
145 views

Can a HSDir see visited onion url's? [duplicate]

Is it possible that a HSDir can see visited onion urls? If I make a onion website and my friend visits it could there be a way that someone can capture the url he used? (the .onion url).
0
votes
2answers
1k views

Do vulnerabilities exist in Tor Browser Bundle

This site: http://www.hongkiat.com/blog/do-donts-tor-network/ claims that Tor Browser Bundle should not be used to protect one’s online privacy and security. FBI’s recent takedown of Freedom ...
2
votes
1answer
108 views

Whonix Workstation Country Code

Should I be concerned about the timezones in my custom whonix workstations (arch, ubuntu, kali)? Installation mediums always ask for my country code. I usually pick a random one. When building ...
1
vote
0answers
41 views

What blog services work well on Tor

I´ve tried to create blog accounts using Tor. They always fail at some point. For example: Wordpress: the confirmation mail doesn't include the link necessary to confirm. Ghost: I registered ...
0
votes
1answer
121 views

Tracking users via google APIs?

if i open website1.com in one tab and it uses some google analytics or google fonts api, then open website2.org in another tab which also uses google products... do the google domains see different ...
0
votes
1answer
146 views

Was I attacked or my identity found out?

I am new to TOR and not very tech savvy. While using TOR to set up an email account, I found that I had to constantly to solve puzzles for verification. Sometimes websites would not allow me access, ...
1
vote
3answers
553 views

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

Tor beside anonymizing our location also make us unique as very few users actually use it on each webservice. question is in what ways destination sites can detect Tor browser? for instance canvas ...
1
vote
1answer
508 views

Can I prevent Tor from building single-hop circuits?

Despite the manual's declared defaults [below], Onion Circuits shows single hop circuits being "Built" by Tor. So I have edited my torrc to specifically include ExcludeSingleHopRelays 1 and ...
3
votes
2answers
397 views

Isn't it easy to de-anonymize users this way?

Instead of looking at a portion of the network, find out the guard of a targeted user, then find which middle node that guard connects to, then which exit is connected to that middle node, then take ...
0
votes
1answer
41 views

Alterations to Tor and finding a way to run tests and simulations [duplicate]

For one of my assignments I have to conduct a research paper. I decided to propose a solution vulnerabilities TOR has with traffic analysis. I'm suggesting adding in random delays,random hop count ...
0
votes
1answer
179 views

What do you make of the news that researchers had found at least 110 Tor nodes that were spying in on network traffic or were honeypots?

URLS for news www.zdnet.com/article/over-100-spying-malicious-tor-nodes-discovered/ www.scmagazineuk.com/security-researchers-discover-over-100-suspicious-tor-nodes-snooping-on-traffic/article/...
0
votes
1answer
94 views

Anonymity considerations of HTTP referer field [duplicate]

I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I ...