Questions tagged [deanonymization]

De-anonymization (also spelt as deanonymization) is a strategy in data mining in which anonymous data is cross-referenced with other sources of data to re-identify the anonymous data source.

Filter by
Sorted by
Tagged with
0
votes
1answer
188 views

What do you make of the news that researchers had found at least 110 Tor nodes that were spying in on network traffic or were honeypots?

URLS for news www.zdnet.com/article/over-100-spying-malicious-tor-nodes-discovered/ www.scmagazineuk.com/security-researchers-discover-over-100-suspicious-tor-nodes-snooping-on-traffic/article/...
0
votes
1answer
107 views

Anonymity considerations of HTTP referer field [duplicate]

I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I ...
1
vote
2answers
298 views

How do we find out the identities of online scammer(s) who used TOR?

A TOR node http://85.93.218.204/ was used for an online scam and more than 20 falilies were involved. How can we uncover identifiable information (such as IP addresses, devices and etc) of these ...
0
votes
1answer
772 views

Detect TOR network using the IP address

I have a website. I just want to detect if the internet traffic is coming through TOR or not. How to find If TOR is being used to access my website ? Is there any catalog of IP address that belongs ...
1
vote
1answer
180 views

IP in DDG is not known VPN/TOR [closed]

Today I upgraded to Tor 6.0, I use Tor with a vpn with psuedo random exit countries habitually. While having 5.5 I noticed when I entered IP into DuckDuckGo while using vpn/tor it was Your IP address ...
1
vote
0answers
2k views

Can Tails Leak My IP? [closed]

I know that by default all traffic is routed trough TOR, but can my IP leak when using Tails? What i mean is, for example, my machine gets hacked while using Tails and somebody who hacked me wants to ...
1
vote
1answer
91 views

How to best avoid having unencrypted information logged by an exit node, if encrypted connection is not an option?

There is a role-playing game I would like to play, but I would like to remain anonymous (more like pseudonymous in this case). I want to keep my IP address hidden from the servers. The main issue I ...
0
votes
1answer
175 views

Can a website read out my MAC address using JavaScript even though I use Tor?

If I use a Tor to visit a site with enabled JavaScript, can this website find out my MAC address, monitor serial number, the serial number of the processor etc?
0
votes
2answers
3k views

Can JavaScript get my real IP?

Can JavaScript get my real IP even if I'm using Tor Browser? I thought Tor Browser deactivated JS by default, but I think it's not the case. Thanks.
3
votes
1answer
384 views

How does de-anonymization work?

I heard that someone, who can read the traffic of many tor nodes (like the government of a country where many nodes are located) can find out which user is sending/reading data to/from which resource ...
2
votes
2answers
159 views

Can I use other applications connected to the Internet while using Tor?

Let's suppose that I am using Tor and I open another page in Firefox at the same time. Will it compromise my anonymity?
2
votes
2answers
1k views

Using regular Firefox browser with Tor in Qubes-OS

So the regular recommendation is to use the Tor browser at all times because it includes no-script, https-everywhere etc by default as well as a number of other tweaks. However I'd like to know if ...
1
vote
1answer
191 views

Can a USB drive's serial number or unique hardware be used to identify me?

When using a technology like tails, For privacy concerns, should I concern myself with whether a USB drive, and my purchase of it, can be used to trace me while running tails?
1
vote
2answers
335 views

Can I permanently blow my anonimity on Tor?

I am new to Tor. I'm not using it for anything illegal or suspicious, I'm just trying to protect my privacy as best as I can from my ISP, NSA, etc. (primarily my IP address, and anything that could ...
0
votes
1answer
57 views

Do other apps use tor when the browser bundle is running?

For example if I run curl from the command line does this go through tor? what about spottify, or other browsers? If so, is this a risk, can I access the internet from other apps while i'm using the ...
1
vote
0answers
26 views

Can Firefox & Tor (on the same machine) be *seen* as the same machine? [duplicate]

Assuming a standard Win7 machine with Firefox and Tor, all auto-updated. Firefox has VLC, Silverlight, Acrobat, and OpenH264 plugins, but also locked down a tiny-bit with NoScript, HTTPS everywhere, ...
3
votes
2answers
233 views

Are there Tor modifications that do NOT expose uniqueness?

Add-ons like Flash and VLC and others are more obvious, and the general notion stands that “any add-on is a risk to make your online fingerprint unique”, but I'd still like to think a simple ...
0
votes
1answer
52 views

Tor Networking Anonimity

Tor Project:FAQ claims the Tor network "will only know the destination". I don't understand this. At layer 3, the IP Src, and IP Dst are always shown in the IP Header. So why couldn't one of the Tor ...
1
vote
4answers
607 views

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

Tor beside anonymizing our location also make us unique as very few users actually use it on each webservice. question is in what ways destination sites can detect Tor browser? for instance canvas ...
5
votes
2answers
185 views

Risk of deanonymization running thousands of hidden service on same server

Is there any difference of risk of deanonymization on running thousands of hidden service on the same server than running just a few? Does the quantity of hidden services on a server actually have ...
1
vote
1answer
455 views

TOR traffic correlation: how quickly can you be de-anonymized?

I know that statistical analysis of the data entering and leaving the TOR network can be used to de-anonymise users given enough time. http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf How ...
7
votes
1answer
33k views

Does windows 10 compromise TOR?

Does running Tor on Windows 10 compromise my security? And further from that, are there any issues I need to be aware of while using Tor on Windows 10?
1
vote
0answers
55 views

Can high network usage be detected and prevented in Tor?

I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using a hidden service. If so, what are the default prevention steps?
4
votes
3answers
2k views

Can tor nodes (entry, exit, others) store IPs?

I'm a new Tor user. And I want to ensure several questions. Can "entry point" router store my IP? Can "middle relay" store "entry point" IP? Can "exit point" router store "middle relay" IP? I think ...
2
votes
1answer
375 views

Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?

I have JavaScript turned off, and so no leakage of screen resolution to Panopticlick.eff.org fingerprint testing tool. However, JonDonym's one - ip-check.info - has an alarming-looking vector down ...
1
vote
0answers
10 views

Using your Tor relay as a client for Torbrowser and other regular Tor traffic: Is this helpful or hurtful to your anonymity? [duplicate]

I run a relay off of my desktop computer, and currently have Torbrowser and Tox configured to use it as a client as well. I seem to remember hearing long ago that a client that also acts as a relay ...
4
votes
1answer
595 views

Tor no longer secure, but can this be fixed?

In a recent episode of a podcast called Security Now (#493: Tor: Not so Anonymous), they claimed that traffic can be delayed in unique ways to identify which client IP address on one side of the Tor ...
1
vote
2answers
189 views

Is browsing with Tor safe against non government entities?

I apologize in advance for my lack of understanding. I am planning on starting an adult content website which I plan on running 100% legally and in compliance with all rules and regulations. However, ...
2
votes
0answers
23 views

Final relay able to encrypt data to the client? [duplicate]

Have been reading the one cell is enough to break anonymity paper, and just have a question. Once a circuit has been successfully created, can the final node of the circuit encrypt a piece of data ...
2
votes
2answers
226 views

dom.storage.enabled in Tor Browser 4.0.2. Security problem?

According to http://ip-check.info/?lang=en dom.storage.enabled is on and this is a problem. The site recommends it to change to false. Is this a security problem? Is this a wrong setting of 4.0.2? ...
2
votes
2answers
384 views

How do ISPs filter out Tor traffic when using a Tor Relay

Tor website says that an ISP may perform Deep Packet Inspection (DPI) and figure out that I am using Tor. References: https://www.torproject.org/docs/bridges.html.en https://www.torproject.org/...
2
votes
1answer
232 views

What is the risk of Guard-Exit node in Tor compare to Guard and exit node separately?

It appears that having Guard-Exit node in Tor increase the probability of deanonymizing the client compare to Guard and exit node separately. To put it in a nutshell if a node at times could become ...
1
vote
0answers
3k views

Reason behind “clearnet warning” when posting URL links on onion websites

When browsing onion websites e.g. discussion forums, quite regularly I will encounter links to clearnet http/https addresses along with an explicit Clearnet Warning along with the URL. What is ...
1
vote
0answers
41 views

Does Adding or Removing Search Engines in TB's Search Bar Affect Annonymity?

Suppose I add or remove a search engine from Tor Browser's search bar; will my anonymity be compromised? I've tried to research this by running Panopticlick before and after installing a search ...
2
votes
4answers
5k views

Can HTML5 canvas image data reveal the users IP?

I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
4
votes
3answers
3k views

Why is putting a VPN between the destination and an exit node unsafe?

In a recent Tor blog post the following was mentioned: The help desk has been asked how to configure a VPN to prevent a website from learning that a user is using Tor. We consider positioning a ...
1
vote
0answers
47 views

Tor time-size attack

What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time ...
3
votes
1answer
246 views

Which one of the relay nodes need to get compromised for client de-anonymization?

Tor can't protect against traffic confirmation (also known as end-to-end correlation), where an attacker tries to confirm an hypothesis by monitoring the right locations in the network and then doing ...
2
votes
1answer
60 views

Does USB modems create a danger when used on routers?

I'm not sure if this is in the right place but it does have to do with exploits and ultimately de-anonymizing Tor. Are USB internet modems dangerous to use, with and without a router (DD-WRT)? I'm ...
1
vote
2answers
137 views

Can partially predictable behavior deanonymize a Tor user?

Let's say a Tor user has a history of routinely accessing websites A, B, and C, and that this history is established before he began using Tor. Let's say some adversary, like his ISP or a government ...
1
vote
1answer
83 views

Can heartbleed be used to de-anonymize you by browsing a site via Tor?

Assuming that you have information in your ram that would identify who you are, and you are using the Tor browser but your pc is running a vulnerable version of openssl, could your memory be dumped by ...
1
vote
2answers
75 views

Can the relay I connect to expose me?

The way I understand Tor is that the "client" (say me) connects to a relay, and that relay is the only computer they connect to from then on. If that is the case, why can't a hostile relay simply run ...
1
vote
2answers
448 views

ip-check.info - Unknown IP, possibly your own, uncovered by FTP

I checked with http://ip-check.info and I got this warning. When I did tested with that site, this never occurred until now. I didn't install any other addons or plugins in Tor Browser Bundle. I only ...
1
vote
1answer
191 views

Flash Player usage

Just started with Tor yesterday. I understand downloading and using Tor means no longer having Flash Player and the reasons why, BUT...when using online sites like PicMonkey (which I use for my work) ...
1
vote
1answer
79 views

Is it possible to link different uses of Tor by using normal changes to the browser (such as bookmarks)?

Is it possible to link different Tor identies (uses of Tor at different times) by using the Bookmarks, settings of various components of the browser, or cosmetic alterations to the toolbars? It has ...
2
votes
1answer
378 views

Is Google de-anonymizing me?

I am a regular TBB user. I update TBB as and when updates are available, with at most a delay of a few days. The bundled addons are also updated regularly. I also have the standalone Vidalia package ...
4
votes
1answer
134 views

Does hosting a relay on the same machine as your browser improve anonymization?

For the sake of argument, let us assume that all traffic is monitored and recorded at your ISP. Would hosting a Tor relay on the same machine that you are running Tor Browser Bundle protect you from ...
3
votes
1answer
323 views

If all network traffic is being monitored, will Tor still be effective at anonymization?

During a panel at the 2014 SXSW conference, Julian Assange (founder of Wikileaks) stated "The ability to surveil everyone on the planet is almost there and, arguably, will be there in the next couple ...
10
votes
2answers
2k views

How can I check if a Firefox plugin is a deanonymization threat?

There are many useful Firefox plugins and extensions that are compatible with the Tor Browser Bundle - how do I know which ones are safe to install without compromising my Tor anonymization?
1
vote
2answers
275 views

Private RSA keys on a Tor hosting

I'm wondering how Tor hosting providers handles using private RSA keys of their users so they can use their own .onion names. As I understand, when I have a private RSA key and I send this private ...