Questions tagged [deanonymization]

De-anonymization (also spelt as deanonymization) is a strategy in data mining in which anonymous data is cross-referenced with other sources of data to re-identify the anonymous data source.

Filter by
Sorted by
Tagged with
0
votes
2answers
1k views

Do vulnerabilities exist in Tor Browser Bundle

This site: http://www.hongkiat.com/blog/do-donts-tor-network/ claims that Tor Browser Bundle should not be used to protect one’s online privacy and security. FBI’s recent takedown of Freedom ...
2
votes
1answer
122 views

Whonix Workstation Country Code

Should I be concerned about the timezones in my custom whonix workstations (arch, ubuntu, kali)? Installation mediums always ask for my country code. I usually pick a random one. When building ...
1
vote
0answers
41 views

What blog services work well on Tor

I´ve tried to create blog accounts using Tor. They always fail at some point. For example: Wordpress: the confirmation mail doesn't include the link necessary to confirm. Ghost: I registered ...
0
votes
1answer
133 views

Tracking users via google APIs?

if i open website1.com in one tab and it uses some google analytics or google fonts api, then open website2.org in another tab which also uses google products... do the google domains see different ...
0
votes
1answer
157 views

Was I attacked or my identity found out?

I am new to TOR and not very tech savvy. While using TOR to set up an email account, I found that I had to constantly to solve puzzles for verification. Sometimes websites would not allow me access, ...
1
vote
1answer
613 views

Can I prevent Tor from building single-hop circuits?

Despite the manual's declared defaults [below], Onion Circuits shows single hop circuits being "Built" by Tor. So I have edited my torrc to specifically include ExcludeSingleHopRelays 1 and ...
3
votes
2answers
438 views

Isn't it easy to de-anonymize users this way?

Instead of looking at a portion of the network, find out the guard of a targeted user, then find which middle node that guard connects to, then which exit is connected to that middle node, then take ...
0
votes
1answer
43 views

Alterations to Tor and finding a way to run tests and simulations [duplicate]

For one of my assignments I have to conduct a research paper. I decided to propose a solution vulnerabilities TOR has with traffic analysis. I'm suggesting adding in random delays,random hop count ...
0
votes
1answer
188 views

What do you make of the news that researchers had found at least 110 Tor nodes that were spying in on network traffic or were honeypots?

URLS for news www.zdnet.com/article/over-100-spying-malicious-tor-nodes-discovered/ www.scmagazineuk.com/security-researchers-discover-over-100-suspicious-tor-nodes-snooping-on-traffic/article/...
0
votes
1answer
107 views

Anonymity considerations of HTTP referer field [duplicate]

I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I ...
3
votes
1answer
391 views

How does de-anonymization work?

I heard that someone, who can read the traffic of many tor nodes (like the government of a country where many nodes are located) can find out which user is sending/reading data to/from which resource ...
7
votes
1answer
33k views

Does windows 10 compromise TOR?

Does running Tor on Windows 10 compromise my security? And further from that, are there any issues I need to be aware of while using Tor on Windows 10?
2
votes
2answers
159 views

Can I use other applications connected to the Internet while using Tor?

Let's suppose that I am using Tor and I open another page in Firefox at the same time. Will it compromise my anonymity?
16
votes
3answers
2k views

Is it known if Tor communication deanonymization played role in Ross Ulbricht arrestment and Silk Road store takedown?

On October 2, 2013 Ross William Ulbricht was identified by FBI as the Silk Road black market website owner and was arrested. Silk Road was operated as a hidden service on the Tor network. See also: ...
0
votes
1answer
773 views

Detect TOR network using the IP address

I have a website. I just want to detect if the internet traffic is coming through TOR or not. How to find If TOR is being used to access my website ? Is there any catalog of IP address that belongs ...
1
vote
1answer
181 views

IP in DDG is not known VPN/TOR [closed]

Today I upgraded to Tor 6.0, I use Tor with a vpn with psuedo random exit countries habitually. While having 5.5 I noticed when I entered IP into DuckDuckGo while using vpn/tor it was Your IP address ...
2
votes
2answers
1k views

Using regular Firefox browser with Tor in Qubes-OS

So the regular recommendation is to use the Tor browser at all times because it includes no-script, https-everywhere etc by default as well as a number of other tweaks. However I'd like to know if ...
1
vote
0answers
2k views

Can Tails Leak My IP? [closed]

I know that by default all traffic is routed trough TOR, but can my IP leak when using Tails? What i mean is, for example, my machine gets hacked while using Tails and somebody who hacked me wants to ...
1
vote
1answer
91 views

How to best avoid having unencrypted information logged by an exit node, if encrypted connection is not an option?

There is a role-playing game I would like to play, but I would like to remain anonymous (more like pseudonymous in this case). I want to keep my IP address hidden from the servers. The main issue I ...
0
votes
1answer
176 views

Can a website read out my MAC address using JavaScript even though I use Tor?

If I use a Tor to visit a site with enabled JavaScript, can this website find out my MAC address, monitor serial number, the serial number of the processor etc?
0
votes
2answers
3k views

Can JavaScript get my real IP?

Can JavaScript get my real IP even if I'm using Tor Browser? I thought Tor Browser deactivated JS by default, but I think it's not the case. Thanks.
5
votes
2answers
188 views

Risk of deanonymization running thousands of hidden service on same server

Is there any difference of risk of deanonymization on running thousands of hidden service on the same server than running just a few? Does the quantity of hidden services on a server actually have ...
3
votes
2answers
234 views

Are there Tor modifications that do NOT expose uniqueness?

Add-ons like Flash and VLC and others are more obvious, and the general notion stands that “any add-on is a risk to make your online fingerprint unique”, but I'd still like to think a simple ...
1
vote
1answer
192 views

Can a USB drive's serial number or unique hardware be used to identify me?

When using a technology like tails, For privacy concerns, should I concern myself with whether a USB drive, and my purchase of it, can be used to trace me while running tails?
10
votes
2answers
2k views

How can I check if a Firefox plugin is a deanonymization threat?

There are many useful Firefox plugins and extensions that are compatible with the Tor Browser Bundle - how do I know which ones are safe to install without compromising my Tor anonymization?
1
vote
2answers
275 views

Private RSA keys on a Tor hosting

I'm wondering how Tor hosting providers handles using private RSA keys of their users so they can use their own .onion names. As I understand, when I have a private RSA key and I send this private ...
1
vote
2answers
338 views

Can I permanently blow my anonimity on Tor?

I am new to Tor. I'm not using it for anything illegal or suspicious, I'm just trying to protect my privacy as best as I can from my ISP, NSA, etc. (primarily my IP address, and anything that could ...
0
votes
1answer
57 views

Do other apps use tor when the browser bundle is running?

For example if I run curl from the command line does this go through tor? what about spottify, or other browsers? If so, is this a risk, can I access the internet from other apps while i'm using the ...
0
votes
1answer
52 views

Tor Networking Anonimity

Tor Project:FAQ claims the Tor network "will only know the destination". I don't understand this. At layer 3, the IP Src, and IP Dst are always shown in the IP Header. So why couldn't one of the Tor ...
1
vote
0answers
26 views

Can Firefox & Tor (on the same machine) be *seen* as the same machine? [duplicate]

Assuming a standard Win7 machine with Firefox and Tor, all auto-updated. Firefox has VLC, Silverlight, Acrobat, and OpenH264 plugins, but also locked down a tiny-bit with NoScript, HTTPS everywhere, ...
16
votes
2answers
1k views

Does Tor insert random delays or perform packet re-ordering to make the discovery of the communication path harder?

If an attacker can observe the Tor user, and the website being visited, it is possible to correlate the traffic by looking at time and size distributions of the communication. Techniques such as ...
1
vote
1answer
459 views

TOR traffic correlation: how quickly can you be de-anonymized?

I know that statistical analysis of the data entering and leaving the TOR network can be used to de-anonymise users given enough time. http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf How ...
2
votes
1answer
377 views

Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?

I have JavaScript turned off, and so no leakage of screen resolution to Panopticlick.eff.org fingerprint testing tool. However, JonDonym's one - ip-check.info - has an alarming-looking vector down ...
1
vote
0answers
55 views

Can high network usage be detected and prevented in Tor?

I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using a hidden service. If so, what are the default prevention steps?
2
votes
0answers
23 views

Final relay able to encrypt data to the client? [duplicate]

Have been reading the one cell is enough to break anonymity paper, and just have a question. Once a circuit has been successfully created, can the final node of the circuit encrypt a piece of data ...
3
votes
1answer
323 views

If all network traffic is being monitored, will Tor still be effective at anonymization?

During a panel at the 2014 SXSW conference, Julian Assange (founder of Wikileaks) stated "The ability to surveil everyone on the planet is almost there and, arguably, will be there in the next couple ...
2
votes
2answers
228 views

dom.storage.enabled in Tor Browser 4.0.2. Security problem?

According to http://ip-check.info/?lang=en dom.storage.enabled is on and this is a problem. The site recommends it to change to false. Is this a security problem? Is this a wrong setting of 4.0.2? ...
4
votes
3answers
3k views

Why is putting a VPN between the destination and an exit node unsafe?

In a recent Tor blog post the following was mentioned: The help desk has been asked how to configure a VPN to prevent a website from learning that a user is using Tor. We consider positioning a ...
2
votes
1answer
60 views

Does USB modems create a danger when used on routers?

I'm not sure if this is in the right place but it does have to do with exploits and ultimately de-anonymizing Tor. Are USB internet modems dangerous to use, with and without a router (DD-WRT)? I'm ...
1
vote
0answers
10 views

Using your Tor relay as a client for Torbrowser and other regular Tor traffic: Is this helpful or hurtful to your anonymity? [duplicate]

I run a relay off of my desktop computer, and currently have Torbrowser and Tox configured to use it as a client as well. I seem to remember hearing long ago that a client that also acts as a relay ...
4
votes
1answer
595 views

Tor no longer secure, but can this be fixed?

In a recent episode of a podcast called Security Now (#493: Tor: Not so Anonymous), they claimed that traffic can be delayed in unique ways to identify which client IP address on one side of the Tor ...
1
vote
2answers
190 views

Is browsing with Tor safe against non government entities?

I apologize in advance for my lack of understanding. I am planning on starting an adult content website which I plan on running 100% legally and in compliance with all rules and regulations. However, ...
2
votes
2answers
386 views

How do ISPs filter out Tor traffic when using a Tor Relay

Tor website says that an ISP may perform Deep Packet Inspection (DPI) and figure out that I am using Tor. References: https://www.torproject.org/docs/bridges.html.en https://www.torproject.org/...
2
votes
1answer
234 views

What is the risk of Guard-Exit node in Tor compare to Guard and exit node separately?

It appears that having Guard-Exit node in Tor increase the probability of deanonymizing the client compare to Guard and exit node separately. To put it in a nutshell if a node at times could become ...
1
vote
0answers
3k views

Reason behind “clearnet warning” when posting URL links on onion websites

When browsing onion websites e.g. discussion forums, quite regularly I will encounter links to clearnet http/https addresses along with an explicit Clearnet Warning along with the URL. What is ...
1
vote
0answers
41 views

Does Adding or Removing Search Engines in TB's Search Bar Affect Annonymity?

Suppose I add or remove a search engine from Tor Browser's search bar; will my anonymity be compromised? I've tried to research this by running Panopticlick before and after installing a search ...
1
vote
0answers
47 views

Tor time-size attack

What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time ...
1
vote
2answers
139 views

Can partially predictable behavior deanonymize a Tor user?

Let's say a Tor user has a history of routinely accessing websites A, B, and C, and that this history is established before he began using Tor. Let's say some adversary, like his ISP or a government ...
5
votes
4answers
2k views

How safe are Tor users?

Given that Silk Road was just shut down, an article was published stating that: Tor Can't Always Keep You Safe; Just Ask Silk Road ... careful traffic monitoring and a little math you can figure ...
1
vote
1answer
79 views

Is it possible to link different uses of Tor by using normal changes to the browser (such as bookmarks)?

Is it possible to link different Tor identies (uses of Tor at different times) by using the Bookmarks, settings of various components of the browser, or cosmetic alterations to the toolbars? It has ...