Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [guard]

Guard relays are the first hop of any circuit through Tor. This category is for guard specific questions.

0
votes
0answers
45 views

Question regarding malicious Tor Entry Guard

What would happen if you are connected to a malicious Tor Entry Guard (without any VPN) that was set up by someone with negative intentions? Wouldn't this person technically be able to see your IP and ...
0
votes
1answer
175 views

What's wrong with my relay? (Consensus Weight Jumping Around)

I recently set up (19 days ago or so) a new, non-exit, relay. It's gotten the guard, stable and fast flags, but it's consensus weight keeps jumping up and down for some reason (my understanding is ...
3
votes
1answer
76 views

Will the network know if a malicious guard keeps dropping connections?

Selective denial of service on guard nodes is a well-known attack, in which the malicious guard keeps dropping connections from Tor clients who are not in the set of his targeted victims. Do Tor ...
1
vote
2answers
343 views

From a metadata perspective, what does an entry node know about its clients?

I am wondering what an entry node knows about its users. I know they do not know where you are sending data or what the data is because of onion routing and encryption respectively. But, does TOR take ...
0
votes
1answer
316 views

Same first node [duplicate]

In TOR Browser 6.5.2 if I do 'New Tor Circuit for this site', I get the same first node and IP address on the new circuit every time I hit new circuit. It always used to differ. If I quit out of TOR ...
1
vote
1answer
337 views

Why does Tor Browser sometimes choose one entry guard (most of the time), but sometimes it choose two or three entry guards?

Some days ago I opened a thread asking how many entry guards Tor Browser currently picks. I found out, with help from forum volunteers, that the current source code of the stable version of Tor (0.2.9....
1
vote
2answers
913 views

Currently, how many entry guards does Tor choose and for how long are they maintained?

As it is said in the Tor FAQ: "each Tor client selects a few relays at random to use as entry points, and uses only those relays for her first hop." These relays are known as "entry guards". I have ...
1
vote
1answer
151 views

What does proposal 271 provide?

Can anyone explain, in simple terms, proposal 271 for the new guard selection algorithm, implemented in Tor 0.3.x? What makes it different from the previous guard selection algorithm? Is it the ...
0
votes
0answers
130 views

How does selecting new guard relays work?

I've been told guards are selected when a client first connects to the Tor network and used until they disappear. What constitutes disappearing? Do all guards need to disappear (and then the whole ...
2
votes
1answer
51 views

Question about the assigned Guard node flag and whether if this flagged node can still be used as middle node

I would like to know some information before launching my Tor node. If my node is assign as a guard node, can it still be used as a middle node or has it became a permanent guard node?
0
votes
1answer
303 views

Using uMatrix add-on in TBB and changing first entry node each time? [duplicate]

I just somehow worry about connecting TBB to the same entry node which may be hacked / surveillenced. Will it be more safe if I used uMatrix add-on in TBB to spoof my network identiies (I also spoof ...
2
votes
1answer
240 views

I'm not getting guard flag. Whats the requirements for that?

Also, im not getting the stable flag. I'v been online for about a month. 20.april I switched from win to linux. I've had some restarts of the relay, but not long downtimes. my fingerprint: ...
1
vote
0answers
30 views

Why is it so hard to use an internal relay that has no Guard flag as Guard Relay?

I've set up a tor relay that has no Guard flag, but I want to use it as a Guard relay when I use Tor from outside. But sometimes it works and sometimes not. Why is this so hard and what can I do to ...
2
votes
2answers
331 views

Entry guards and multiple Tor clients

Suppose a computer user is running multiple Tor clients: a system-wide tor instance, Tor Browser, Tor Messenger, Ricochet, etc. Given that all of these clients independently select entry guard nodes ...
1
vote
1answer
444 views

First Circuit Server Constant (New Identity) [duplicate]

No matter what I am trying, I can't change the first server in the circuit. Neither "New Identity" nor "New Circuit" or closing the browser will change it. I tried two different tor instances from ...
3
votes
0answers
33 views

why is the weight for guards in exit position equal to weight of both guard ans exit flagged nodes for exit position?

Why is the weight factor Weg set equal to Wed in tor code (in file dirvote.c)? How does it still result in correct probabilities?
0
votes
1answer
194 views

Tor entrance point does not change [duplicate]

When I look at the tor channel - the entrance point is always 124.6.36.230 (Great Britain) - even if I ask tor to choose a new channel. I thought the route through tor is randomly selected. But if the ...
12
votes
3answers
10k views

Why is the first ip address Tor goes to the same one in Germany?

Every time I start Tor or switch to a new identity, the first web address in the list of Tor circuit connections is (Germany) 93.180.156.84. Is Tor supposed to work this way? I was under the ...
1
vote
1answer
485 views

How can I randomize the entry guard?

Tor is moving to a single entry node implementation (#11480). I think that's because it's statistically feasible for an adversary to deploy entry and exit nodes and perform a correlation attack by ...
3
votes
1answer
1k views

Using Tor, could I see the IP address of my entry node with “tracert”?

Can one observe the IP address of his entry node with "tracert"? In fact, what type of information does "tracert" is able to observe on Tor network?
2
votes
3answers
105 views

Can Tor run on messaging applications on my phone, and how?

I would like to know if Tor can cooperate with other applications, if the information leaks can be stopped and I can be anonymous. For instance on a messaging application, if someone were to try to ...
6
votes
1answer
667 views

No guard flag after 3rd month

I am running a Tor relay for 6 Months now. The first 3 months it was easy for me to get the Guard flag. But since then (3 months) (I didn't change the configuartion) only moria1 is voting for Guard. (...
3
votes
1answer
446 views

How Guard Discovery attack in Tor network works?

How Guard Discovery attack works? What steps an attacker need to perform in order to discover the guard relay of the HS? How easy this attack can be realized in the real world? What are the ...
1
vote
1answer
2k views

Is my Tor service being middle manned hacked or sec?

Recently I noticed a big change in my orbot log...it starts with these 4 PRE QUESTIONS- tor: PRE: Is binary exec? true polipo: PRE: Is binary exec? true obfsclient: PRE: Is binary exec? true xtables: ...
1
vote
1answer
188 views

What is the risk of Guard-Exit node in Tor compare to Guard and exit node separately?

It appears that having Guard-Exit node in Tor increase the probability of deanonymizing the client compare to Guard and exit node separately. To put it in a nutshell if a node at times could become ...
1
vote
0answers
179 views

Probability for using a malicious entry-relay with and without Entry-Guards?

Im trying to figure out, what the probability for choosing a malicious entry-guard, depended on the amount of Relays and the fraction of malicious Relays, is. In the tor-faq it says for using NO ...
1
vote
1answer
493 views

I am using my Tor relay as my entry “guard” for the TBB. What are the risks/downside of doing this?

In my Tor Browser Bundle's (TBB's) 'torrc' file I have set 'EntryNode' to my node's fingerprint. This means that the TBB uses my node as its "guard/entry" relay. By monitoring my node with 'arm' I can ...
3
votes
1answer
71 views

If my network link is subject to frequent, short, outages (a gentle form of DoS attack?), can this help promote other nodes to guard before mine?

My broadband provider in the UK is a very large telecoms company that was once state owned. I have an "unlimited" broadband contract with them so running my Tor (non-exit) relay with an advertised ...
3
votes
1answer
502 views

How to prevent a rogue Tor entry node?

The Tor system works by connecting to a Tor node. That Tor node then connects to a deeper Tor node, which connects to a deeper Tor node, which connects to an exit node. How do I know that there's no ...
9
votes
0answers
356 views

Why does adding a Guard-Exit (EE) node in Tor yield more catch probability than adding a guard and exit node separately? [duplicate]

The following is the default Tor network in shadow simulator: Total BW of Guard flagged nodes=258.15 MB/S Total BW of Middle nodes=23.69 MB/S Total BW of Exit flagged nodes=13.23 MB/S Total BW ...
2
votes
3answers
588 views

What happens when Tor always chooses the same path?

What weakness would this expose? It doesn't seem obvious that there would be any apparent way to attack.
4
votes
1answer
169 views

What does “Directory guard” design means in the following context and could somebody elaborate on this Tor FAQ quote?

Following, please find a quote from Tor FAQ : "Restricting your entry nodes may also help against attackers who want to run a few Tor nodes and easily enumerate all of the Tor user IP addresses....
3
votes
1answer
2k views

What is the relationship between guard nodes and bridges?

What is the relationship between guard nodes and bridges when building Tor circuits? If I connect to the Tor network through a bridge, is the bridge acting as my guard node (such that there are still ...
2
votes
1answer
134 views

Which one of the relay nodes need to get compromised for client de-anonymization?

Tor can't protect against traffic confirmation (also known as end-to-end correlation), where an attacker tries to confirm an hypothesis by monitoring the right locations in the network and then doing ...
1
vote
1answer
423 views

Running a Tor (non-exit) relay behind university firewall

I have a personal laptop connected to a university connection, and reach the Internet through a proxy server. I have configured Tor to use only HTTP/HTTPS (since the firewall seems to reject all other ...
4
votes
1answer
277 views

What is the risk of guard relay and exit relay being one and the same?

Looking at the circuits build for a client during a Tor process, I have noticed the following: Four circuits were built. On the first circuit the guard node was a1. On the second circuit the exit ...
3
votes
1answer
125 views

How a client maintains a list of guard nodes, from among hundreds of guard nodes, for creating a circuit?

It is said that a client maintains a list of guard nodes for certain time for making a circuit. I want to know how many number of guard nodes they make in a list? How often they change these guard ...
2
votes
1answer
187 views

how to find out the total bandwidth of guard nodes in Tor network?

I want to know the total bandwidth of the guard nodes. I went through https://metrics.torproject.org/network.html#bandwidth but I saw only the graphs. I want to know the value.
0
votes
1answer
143 views

A number of differences have been observed when using Tails versus TBB. Are these differences normal and part of the design of these packages?

A number of differences have been observed when using Tails versus TBB. Are these differences normal and part of the design and implementation of these packages or it maybe something else? Below, ...
2
votes
1answer
249 views

Entry guards are persistent for a period of time when using Tor. How is it done?

One may use multiple systems to connect to Tor. It maybe done from different physical locations. Sometimes it is direct access to Tor, other times connection to Tor maybe via VPN. My question is how ...
6
votes
2answers
1k views

Why was my relay given the Guard flag only for it to be removed an hour+ later?

My relay 'angrykitteh' (the kitten is now quite frustrated!) was blessed and granted the flag 'Guard' by the Directory Authorities as its uptime is more than 8 days and the bandwidth is deemed ...
6
votes
2answers
263 views

Tracking User Location using Entry Guards?

Let's say that someone moves a Tor instance [1] from one internet access point [2] to another one. And let's say that an adversary is logging traffic from both access points. The adversary could log, ...
2
votes
2answers
161 views

Entry guards and separate identities

I have just finished reading the posting on arma's blog about entry guards and I'm trying to reconcile what I have read there with what I (think) I understand from other postings about Tor. First, I ...
11
votes
1answer
1k views

Is it dangerous to use Tails without persistent entry guards?

Being a LiveCD with no persistent storage by default, Tails currently does not use persistent Tor entry guards. In a recent post on the Tor blog, arma discussed the possibility of "improving Tor's ...
5
votes
1answer
537 views

Will hibernation cause my relay to lose the Guard flag?

My relay's outgoing traffic is limited, so I had to enable accounting. The limit hasn't been reached for a while now and recently my relay received the Guard flag. Will this flag be lost the next ...
4
votes
1answer
208 views

Where along the path is encryption used?

This question is born out of two questions that I saw coming up. Is the connection between my computer and the Tor network encrypted? How does Tor encrypt my traffic before it sends it to the server?...
8
votes
1answer
500 views

Why is a longer guard rotation period with fewer guards better than the other way around?

Tor introduced guards, which are - oversimplified said - relays the client picks and holds for some time as the first hop, to protect the client against the so-called 'predecessor attack'. Entry ...
9
votes
1answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
6
votes
1answer
288 views

What, precisely, are the criteria for determining if a relay will be flagged as a guard?

The Tor FAQ's "What are Entry Guards?" entry does not describe the process by which a relay becomes a guard. The word "flag" is not mentioned anywhere in the FAQ index. Arma's "The lifecycle of a ...
9
votes
2answers
2k views

Should I choose a new guard if the network is overloaded?

When I start the Tor Browser Bundle I sometimes see the message: Your Guard … is failing more circuits than usual. Most likely this means the Tor network is overloaded. If this one guard node is ...