Want to help moderate this community? We need more candidates in the ongoing election!

Questions tagged [deanonymization]

De-anonymization (also spelt as deanonymization) is a strategy in data mining in which anonymous data is cross-referenced with other sources of data to re-identify the anonymous data source.

Filter by
Sorted by
Tagged with
25
votes
2answers
2k views

How strong is the anonymity of a hidden service compared to an average Tor client? How much easier is it to learn the Hidden Service's IP address?

Another way of putting this: How hard would it be to de-anonymize a hidden service? By "de-anonymize" I mean revealing the IP address of whatever server the hidden service is hosted on. Of course, ...
15
votes
3answers
2k views

Is it known if Tor communication deanonymization played role in Ross Ulbricht arrestment and Silk Road store takedown?

On October 2, 2013 Ross William Ulbricht was identified by FBI as the Silk Road black market website owner and was arrested. Silk Road was operated as a hidden service on the Tor network. See also: ...
15
votes
2answers
1k views

Does Tor insert random delays or perform packet re-ordering to make the discovery of the communication path harder?

If an attacker can observe the Tor user, and the website being visited, it is possible to correlate the traffic by looking at time and size distributions of the communication. Techniques such as ...
9
votes
2answers
2k views

How can I check if a Firefox plugin is a deanonymization threat?

There are many useful Firefox plugins and extensions that are compatible with the Tor Browser Bundle - how do I know which ones are safe to install without compromising my Tor anonymization?
8
votes
4answers
946 views

Does it make sense to use Tor on a vanilla Android phone?

I use Tor on Android because it's easily configurable for Duck Duck Go and Twitter with Orbot. It's possible to use it with a stable Firefox version too but I can't because I use the beta version. On ...
7
votes
1answer
4k views

Is it dangerous to watch videos full screen on Tor Browser?

When watching HTML5 videos on Tor Browser, is it dangerous to go full screen? Can this be used to find out my screen resolution? Especially wondering this for Youtube.
6
votes
2answers
438 views

How can I protect myself against GCHQ's attempts to de-anonymise me?

Given the latest revelations about GCHQ's methods to de-anonymise Tor users, how can I keep myself safe? From the document: We will never be able to de-anonymize all Tor users all the time [but] ...
6
votes
1answer
31k views

Does windows 10 compromise TOR?

Does running Tor on Windows 10 compromise my security? And further from that, are there any issues I need to be aware of while using Tor on Windows 10?
5
votes
4answers
2k views

How safe are Tor users?

Given that Silk Road was just shut down, an article was published stating that: Tor Can't Always Keep You Safe; Just Ask Silk Road ... careful traffic monitoring and a little math you can figure ...
5
votes
2answers
1k views

Is it posible to choose what entry node you want to use?

If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than ...
5
votes
2answers
164 views

Risk of deanonymization running thousands of hidden service on same server

Is there any difference of risk of deanonymization on running thousands of hidden service on the same server than running just a few? Does the quantity of hidden services on a server actually have ...
4
votes
3answers
2k views

Why is putting a VPN between the destination and an exit node unsafe?

In a recent Tor blog post the following was mentioned: The help desk has been asked how to configure a VPN to prevent a website from learning that a user is using Tor. We consider positioning a ...
4
votes
3answers
2k views

Can tor nodes (entry, exit, others) store IPs?

I'm a new Tor user. And I want to ensure several questions. Can "entry point" router store my IP? Can "middle relay" store "entry point" IP? Can "exit point" router store "middle relay" IP? I think ...
4
votes
1answer
558 views

Tor no longer secure, but can this be fixed?

In a recent episode of a podcast called Security Now (#493: Tor: Not so Anonymous), they claimed that traffic can be delayed in unique ways to identify which client IP address on one side of the Tor ...
4
votes
1answer
124 views

Does hosting a relay on the same machine as your browser improve anonymization?

For the sake of argument, let us assume that all traffic is monitored and recorded at your ISP. Would hosting a Tor relay on the same machine that you are running Tor Browser Bundle protect you from ...
3
votes
2answers
388 views

Isn't it easy to de-anonymize users this way?

Instead of looking at a portion of the network, find out the guard of a targeted user, then find which middle node that guard connects to, then which exit is connected to that middle node, then take ...
3
votes
1answer
305 views

If all network traffic is being monitored, will Tor still be effective at anonymization?

During a panel at the 2014 SXSW conference, Julian Assange (founder of Wikileaks) stated "The ability to surveil everyone on the planet is almost there and, arguably, will be there in the next couple ...
3
votes
2answers
416 views

Are .onion addresses leak-proof?

I want to perform tasks other than web browsing over Tor, for example XMPP chat. I don't want to have to rely on a Tor implementation in the applications themselves, but I do want to avoid leaking my ...
3
votes
1answer
325 views

How does de-anonymization work?

I heard that someone, who can read the traffic of many tor nodes (like the government of a country where many nodes are located) can find out which user is sending/reading data to/from which resource ...
3
votes
1answer
324 views

Signal NEWNYM vs Stream isolation

Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
2
votes
2answers
352 views

How do ISPs filter out Tor traffic when using a Tor Relay

Tor website says that an ISP may perform Deep Packet Inspection (DPI) and figure out that I am using Tor. References: https://www.torproject.org/docs/bridges.html.en https://www.torproject.org/...
2
votes
1answer
107 views

Whonix Workstation Country Code

Should I be concerned about the timezones in my custom whonix workstations (arch, ubuntu, kali)? Installation mediums always ask for my country code. I usually pick a random one. When building ...
2
votes
2answers
127 views

Can I use other applications connected to the Internet while using Tor?

Let's suppose that I am using Tor and I open another page in Firefox at the same time. Will it compromise my anonymity?
2
votes
4answers
5k views

Can HTML5 canvas image data reveal the users IP?

I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
2
votes
1answer
746 views

Checking for DNS leak on TOR router

I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
2
votes
3answers
489 views

Does it matter when you connect to TOR?

Does it matter when you connect to TOR Network ? 2 cases: 1. You connect to TOR after 10 minutes after you connect to your real facebook/bank/email account. Is it harmfull to connect to TOR as like ...
2
votes
1answer
457 views

Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation? [closed]

In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that ...
2
votes
2answers
1k views

Using regular Firefox browser with Tor in Qubes-OS

So the regular recommendation is to use the Tor browser at all times because it includes no-script, https-everywhere etc by default as well as a number of other tweaks. However I'd like to know if ...
2
votes
2answers
204 views

Are there Tor modifications that do NOT expose uniqueness?

Add-ons like Flash and VLC and others are more obvious, and the general notion stands that “any add-on is a risk to make your online fingerprint unique”, but I'd still like to think a simple ...
2
votes
1answer
359 views

Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?

I have JavaScript turned off, and so no leakage of screen resolution to Panopticlick.eff.org fingerprint testing tool. However, JonDonym's one - ip-check.info - has an alarming-looking vector down ...
2
votes
2answers
199 views

dom.storage.enabled in Tor Browser 4.0.2. Security problem?

According to http://ip-check.info/?lang=en dom.storage.enabled is on and this is a problem. The site recommends it to change to false. Is this a security problem? Is this a wrong setting of 4.0.2? ...
2
votes
1answer
203 views

What is the risk of Guard-Exit node in Tor compare to Guard and exit node separately?

It appears that having Guard-Exit node in Tor increase the probability of deanonymizing the client compare to Guard and exit node separately. To put it in a nutshell if a node at times could become ...
2
votes
1answer
147 views

Which one of the relay nodes need to get compromised for client de-anonymization?

Tor can't protect against traffic confirmation (also known as end-to-end correlation), where an attacker tries to confirm an hypothesis by monitoring the right locations in the network and then doing ...
2
votes
1answer
56 views

Does USB modems create a danger when used on routers?

I'm not sure if this is in the right place but it does have to do with exploits and ultimately de-anonymizing Tor. Are USB internet modems dangerous to use, with and without a router (DD-WRT)? I'm ...
2
votes
1answer
351 views

Is Google de-anonymizing me?

I am a regular TBB user. I update TBB as and when updates are available, with at most a delay of a few days. The bundled addons are also updated regularly. I also have the standalone Vidalia package ...
2
votes
0answers
135 views

De-anonymization in Tor, just a matter of time?

Simple question. Doesn't the way Tor works make a de-anonymization more likely the longer you use/run Tor? From my understanding, you are fully de-anonymized when X controls both Entry Guard Node ...
2
votes
0answers
71 views

What kinds of attack can a bridge carry out?

I have been recently doing some research on anonymity implications of using a bridge, and wrote a tool (not very well written though) for setting up a malicious bridge node. However, I am not clear ...
2
votes
1answer
302 views

Why does TOR not intentionally choose nodes from different countries?

I've read than if an attacker could control both entry and exit node into the tor network he could easily de-anonymize TOR users. I have also read that TOR chooses nodes at random. So my question is ...
2
votes
1answer
273 views

Hostname Hacking

How do I protect against this vulnerability? https://mascherari.press/dark-web-diaries-hostname-hacking/ > torify curl -H 'Host: localhost' http://myonionaddress.onion It reveals another onion ...
2
votes
0answers
22 views

Final relay able to encrypt data to the client? [duplicate]

Have been reading the one cell is enough to break anonymity paper, and just have a question. Once a circuit has been successfully created, can the final node of the circuit encrypt a piece of data ...
1
vote
1answer
73 views

Can heartbleed be used to de-anonymize you by browsing a site via Tor?

Assuming that you have information in your ram that would identify who you are, and you are using the Tor browser but your pc is running a vulnerable version of openssl, could your memory be dumped by ...
1
vote
1answer
210 views

Does cross-browser fingreprinting work in Tor Browser?

https://thehackernews.com/2017/02/cross-browser-tracking.html describes a a cross-browser fingerprinting technique. What can Tor Browser can do to defeat this?
1
vote
2answers
250 views

Private RSA keys on a Tor hosting

I'm wondering how Tor hosting providers handles using private RSA keys of their users so they can use their own .onion names. As I understand, when I have a private RSA key and I send this private ...
1
vote
1answer
50 views

Clearing the state of rendezvous client provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
1
vote
2answers
366 views

Is this setup to send anonymous email secure?

I am working for a company that engages in unethical business practices with a customer. I need to send an anonymous email to the labor board and the customer. I need to keep my identity a secret, but ...
1
vote
2answers
173 views

Should use same ISP for Tor and Real life?

Should I use same ISP for connecting to Tor and for connecting to my real life sites like email and other sites where my Last Name and First Name figure ? I know about VPNs, Bridges and other things ...
1
vote
1answer
294 views

A server behind a physical Tor gateway to hide its location

Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access? In my world-...
1
vote
1answer
144 views

Can a HSDir see visited onion url's? [duplicate]

Is it possible that a HSDir can see visited onion urls? If I make a onion website and my friend visits it could there be a way that someone can capture the url he used? (the .onion url).
1
vote
1answer
73 views

How to best avoid having unencrypted information logged by an exit node, if encrypted connection is not an option?

There is a role-playing game I would like to play, but I would like to remain anonymous (more like pseudonymous in this case). I want to keep my IP address hidden from the servers. The main issue I ...
1
vote
1answer
172 views

Can a USB drive's serial number or unique hardware be used to identify me?

When using a technology like tails, For privacy concerns, should I concern myself with whether a USB drive, and my purchase of it, can be used to trace me while running tails?