Questions tagged [deanonymization]

De-anonymization (also spelt as deanonymization) is a strategy in data mining in which anonymous data is cross-referenced with other sources of data to re-identify the anonymous data source.

Filter by
Sorted by
Tagged with
1
vote
0answers
93 views

Using bridges don't hide using TOR, is it okay? [closed]

Good day, Using bridges don't hide using TOR, is it okay? If the question is stupid, sorry) To check it - whoer helped. If it's normal situation, please, advise smth. that can hide it absolutely, ...
3
votes
2answers
644 views

Are .onion addresses leak-proof?

I want to perform tasks other than web browsing over Tor, for example XMPP chat. I don't want to have to rely on a Tor implementation in the applications themselves, but I do want to avoid leaking my ...
2
votes
1answer
664 views

Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation? [closed]

In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that ...
1
vote
1answer
176 views

Can a HSDir see visited onion url's? [duplicate]

Is it possible that a HSDir can see visited onion urls? If I make a onion website and my friend visits it could there be a way that someone can capture the url he used? (the .onion url).
2
votes
1answer
139 views

Whonix Workstation Country Code

Should I be concerned about the timezones in my custom whonix workstations (arch, ubuntu, kali)? Installation mediums always ask for my country code. I usually pick a random one. When building ...
0
votes
2answers
1k views

Do vulnerabilities exist in Tor Browser Bundle

This site: http://www.hongkiat.com/blog/do-donts-tor-network/ claims that Tor Browser Bundle should not be used to protect one’s online privacy and security. FBI’s recent takedown of Freedom ...
1
vote
0answers
45 views

What blog services work well on Tor

I´ve tried to create blog accounts using Tor. They always fail at some point. For example: Wordpress: the confirmation mail doesn't include the link necessary to confirm. Ghost: I registered ...
1
vote
1answer
264 views

Does cross-browser fingreprinting work in Tor Browser?

https://thehackernews.com/2017/02/cross-browser-tracking.html describes a a cross-browser fingerprinting technique. What can Tor Browser can do to defeat this?
0
votes
1answer
143 views

Tracking users via google APIs?

if i open website1.com in one tab and it uses some google analytics or google fonts api, then open website2.org in another tab which also uses google products... do the google domains see different ...
0
votes
1answer
171 views

Was I attacked or my identity found out?

I am new to TOR and not very tech savvy. While using TOR to set up an email account, I found that I had to constantly to solve puzzles for verification. Sometimes websites would not allow me access, ...
1
vote
1answer
716 views

Can I prevent Tor from building single-hop circuits?

Despite the manual's declared defaults [below], Onion Circuits shows single hop circuits being "Built" by Tor. So I have edited my torrc to specifically include ExcludeSingleHopRelays 1 and ...
3
votes
2answers
567 views

Isn't it easy to de-anonymize users this way?

Instead of looking at a portion of the network, find out the guard of a targeted user, then find which middle node that guard connects to, then which exit is connected to that middle node, then take ...
0
votes
1answer
52 views

Alterations to Tor and finding a way to run tests and simulations [duplicate]

For one of my assignments I have to conduct a research paper. I decided to propose a solution vulnerabilities TOR has with traffic analysis. I'm suggesting adding in random delays,random hop count ...
0
votes
1answer
195 views

What do you make of the news that researchers had found at least 110 Tor nodes that were spying in on network traffic or were honeypots?

URLS for news www.zdnet.com/article/over-100-spying-malicious-tor-nodes-discovered/ www.scmagazineuk.com/security-researchers-discover-over-100-suspicious-tor-nodes-snooping-on-traffic/article/...
0
votes
1answer
131 views

Anonymity considerations of HTTP referer field [duplicate]

I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I ...
1
vote
2answers
311 views

How do we find out the identities of online scammer(s) who used TOR?

A TOR node http://85.93.218.204/ was used for an online scam and more than 20 falilies were involved. How can we uncover identifiable information (such as IP addresses, devices and etc) of these ...
0
votes
1answer
809 views

Detect TOR network using the IP address

I have a website. I just want to detect if the internet traffic is coming through TOR or not. How to find If TOR is being used to access my website ? Is there any catalog of IP address that belongs ...
1
vote
1answer
202 views

IP in DDG is not known VPN/TOR [closed]

Today I upgraded to Tor 6.0, I use Tor with a vpn with psuedo random exit countries habitually. While having 5.5 I noticed when I entered IP into DuckDuckGo while using vpn/tor it was Your IP address ...
1
vote
0answers
3k views

Can Tails Leak My IP? [closed]

I know that by default all traffic is routed trough TOR, but can my IP leak when using Tails? What i mean is, for example, my machine gets hacked while using Tails and somebody who hacked me wants to ...
1
vote
1answer
103 views

How to best avoid having unencrypted information logged by an exit node, if encrypted connection is not an option?

There is a role-playing game I would like to play, but I would like to remain anonymous (more like pseudonymous in this case). I want to keep my IP address hidden from the servers. The main issue I ...
0
votes
1answer
202 views

Can a website read out my MAC address using JavaScript even though I use Tor?

If I use a Tor to visit a site with enabled JavaScript, can this website find out my MAC address, monitor serial number, the serial number of the processor etc?
0
votes
2answers
4k views

Can JavaScript get my real IP?

Can JavaScript get my real IP even if I'm using Tor Browser? I thought Tor Browser deactivated JS by default, but I think it's not the case. Thanks.
3
votes
1answer
667 views

How does de-anonymization work?

I heard that someone, who can read the traffic of many tor nodes (like the government of a country where many nodes are located) can find out which user is sending/reading data to/from which resource ...
2
votes
2answers
191 views

Can I use other applications connected to the Internet while using Tor?

Let's suppose that I am using Tor and I open another page in Firefox at the same time. Will it compromise my anonymity?
2
votes
2answers
2k views

Using regular Firefox browser with Tor in Qubes-OS

So the regular recommendation is to use the Tor browser at all times because it includes no-script, https-everywhere etc by default as well as a number of other tweaks. However I'd like to know if ...
1
vote
1answer
196 views

Can a USB drive's serial number or unique hardware be used to identify me?

When using a technology like tails, For privacy concerns, should I concern myself with whether a USB drive, and my purchase of it, can be used to trace me while running tails?
1
vote
2answers
376 views

Can I permanently blow my anonimity on Tor?

I am new to Tor. I'm not using it for anything illegal or suspicious, I'm just trying to protect my privacy as best as I can from my ISP, NSA, etc. (primarily my IP address, and anything that could ...
0
votes
1answer
59 views

Do other apps use tor when the browser bundle is running?

For example if I run curl from the command line does this go through tor? what about spottify, or other browsers? If so, is this a risk, can I access the internet from other apps while i'm using the ...
1
vote
0answers
29 views

Can Firefox & Tor (on the same machine) be *seen* as the same machine? [duplicate]

Assuming a standard Win7 machine with Firefox and Tor, all auto-updated. Firefox has VLC, Silverlight, Acrobat, and OpenH264 plugins, but also locked down a tiny-bit with NoScript, HTTPS everywhere, ...
3
votes
2answers
250 views

Are there Tor modifications that do NOT expose uniqueness?

Add-ons like Flash and VLC and others are more obvious, and the general notion stands that “any add-on is a risk to make your online fingerprint unique”, but I'd still like to think a simple ...
0
votes
1answer
53 views

Tor Networking Anonimity

Tor Project:FAQ claims the Tor network "will only know the destination". I don't understand this. At layer 3, the IP Src, and IP Dst are always shown in the IP Header. So why couldn't one of the Tor ...
1
vote
4answers
663 views

Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques

Tor beside anonymizing our location also make us unique as very few users actually use it on each webservice. question is in what ways destination sites can detect Tor browser? for instance canvas ...
5
votes
2answers
200 views

Risk of deanonymization running thousands of hidden service on same server

Is there any difference of risk of deanonymization on running thousands of hidden service on the same server than running just a few? Does the quantity of hidden services on a server actually have ...
1
vote
1answer
533 views

TOR traffic correlation: how quickly can you be de-anonymized?

I know that statistical analysis of the data entering and leaving the TOR network can be used to de-anonymise users given enough time. http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf How ...
7
votes
1answer
35k views

Does windows 10 compromise TOR?

Does running Tor on Windows 10 compromise my security? And further from that, are there any issues I need to be aware of while using Tor on Windows 10?
1
vote
0answers
56 views

Can high network usage be detected and prevented in Tor?

I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using a hidden service. If so, what are the default prevention steps?
4
votes
3answers
3k views

Can tor nodes (entry, exit, others) store IPs?

I'm a new Tor user. And I want to ensure several questions. Can "entry point" router store my IP? Can "middle relay" store "entry point" IP? Can "exit point" router store "middle relay" IP? I think ...
2
votes
1answer
426 views

Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?

I have JavaScript turned off, and so no leakage of screen resolution to Panopticlick.eff.org fingerprint testing tool. However, JonDonym's one - ip-check.info - has an alarming-looking vector down ...
1
vote
0answers
15 views

Using your Tor relay as a client for Torbrowser and other regular Tor traffic: Is this helpful or hurtful to your anonymity? [duplicate]

I run a relay off of my desktop computer, and currently have Torbrowser and Tox configured to use it as a client as well. I seem to remember hearing long ago that a client that also acts as a relay ...
4
votes
1answer
660 views

Tor no longer secure, but can this be fixed?

In a recent episode of a podcast called Security Now (#493: Tor: Not so Anonymous), they claimed that traffic can be delayed in unique ways to identify which client IP address on one side of the Tor ...
1
vote
2answers
206 views

Is browsing with Tor safe against non government entities?

I apologize in advance for my lack of understanding. I am planning on starting an adult content website which I plan on running 100% legally and in compliance with all rules and regulations. However, ...
2
votes
0answers
23 views

Final relay able to encrypt data to the client? [duplicate]

Have been reading the one cell is enough to break anonymity paper, and just have a question. Once a circuit has been successfully created, can the final node of the circuit encrypt a piece of data ...
2
votes
2answers
274 views

dom.storage.enabled in Tor Browser 4.0.2. Security problem?

According to http://ip-check.info/?lang=en dom.storage.enabled is on and this is a problem. The site recommends it to change to false. Is this a security problem? Is this a wrong setting of 4.0.2? ...
2
votes
2answers
398 views

How do ISPs filter out Tor traffic when using a Tor Relay

Tor website says that an ISP may perform Deep Packet Inspection (DPI) and figure out that I am using Tor. References: https://www.torproject.org/docs/bridges.html.en https://www.torproject.org/...
2
votes
1answer
258 views

What is the risk of Guard-Exit node in Tor compare to Guard and exit node separately?

It appears that having Guard-Exit node in Tor increase the probability of deanonymizing the client compare to Guard and exit node separately. To put it in a nutshell if a node at times could become ...
1
vote
0answers
3k views

Reason behind "clearnet warning" when posting URL links on onion websites

When browsing onion websites e.g. discussion forums, quite regularly I will encounter links to clearnet http/https addresses along with an explicit Clearnet Warning along with the URL. What is ...
1
vote
0answers
44 views

Does Adding or Removing Search Engines in TB's Search Bar Affect Annonymity?

Suppose I add or remove a search engine from Tor Browser's search bar; will my anonymity be compromised? I've tried to research this by running Panopticlick before and after installing a search ...
2
votes
4answers
6k views

Can HTML5 canvas image data reveal the users IP?

I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
5
votes
3answers
3k views

Why is putting a VPN between the destination and an exit node unsafe?

In a recent Tor blog post the following was mentioned: The help desk has been asked how to configure a VPN to prevent a website from learning that a user is using Tor. We consider positioning a ...
1
vote
0answers
49 views

Tor time-size attack

What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time ...