Questions tagged [information-leaks]
The information-leaks tag has no usage guidance.
23
questions
0
votes
0
answers
240
views
Why do I get connected to TOR nodes that I excluded in TORRC?
I'm testing the TOR browser bundle and I keep getting connected to exit nodes in countries that I've explicitly excluded in my torrc:
StrictNodes 1
ExcludeExitNodes {ad},{ar},{au},{at},{bs},{by},{be},...
- 1
0
votes
0
answers
94
views
How does Tor protects from the list of Digital Finger Print
I have heard that Tor protects users from sites that try to fingerprint browsing history with its integration of NoScript. But it's not completely secure as some researchers claims.
Does Tor really ...
- 101
0
votes
1
answer
185
views
iplocation.net Reports the Same Proxy, TorBrowser or Firefox (non-tor)
The site https://www.iplocation.net/find-ip-address (What is my IP?) reports an IP address, and two proxy addresses. One of the two proxy addresses is the same from TorBrowser or from Firefox (non-...
- 21
0
votes
1
answer
87
views
Protect against pseudonymous identity activity on a forum and traffic correlation?
I use Tor when I need to use a pseudonymous account on a forum. A observer can see when I connect to Tor and correlate with activity of the account from the forum
How I can protect against this ?
1
vote
1
answer
818
views
nginx leaks my hidden service port number
I have my .onion service running:
http://oeptyn6jtusgda63.onion/
When i try to open wrong link, my TorBrowser shows me an error like this:
Firefox can’t establish a connection to the server at ...
- 31
0
votes
2
answers
307
views
How to Detect Tor Usage From Old Network Traces?
As part of some computer forensics work, I have been asked to look at network traces (showing IP addresses and port numbers) from several years ago, to see if someone was using Tor.
I have heard that ...
2
votes
0
answers
281
views
Nginx directory disclosures?
I'm dealing with a minor information disclosure when using nginx with onions. Servervault.com might be better suited for an nginx question, but I'm not sure a lot of those guys understand onions or ...
- 21
1
vote
0
answers
53
views
What blog services work well on Tor
I´ve tried to create blog accounts using Tor. They always fail at some point. For example:
Wordpress: the confirmation mail doesn't include the link necessary to confirm.
Ghost: I registered ...
3
votes
1
answer
3k
views
cURL and wget with Tor
What information about me (not the exit node) is revealed when a request originating from cURL / wget is proxied through Tor?
Example:
curl https://example.com/ --socks5 localhost:9150 -H "User-...
0
votes
2
answers
120
views
Location fetch of a website via Firefox while mobile hotspot is ON throghTOR
I understand that for best security Tor needs to be used along with Tor browser. Sometimes I do not use Tor browser and I configure Firefox to use SOCKS5 proxy. The following happened while I was ...
- 330
7
votes
1
answer
400
views
List of attacks that try to trick browser to not use SOCKS/Tor
I've heard it called "disbanding" attacks where the attacker induces a client into not routing a connection over Tor. Basically all of the things that the TBB protects against.
Examples might be ...
- 1,274
1
vote
1
answer
817
views
Does traffic still go through Tor with this Exception Error in aria2c?
On Ubuntu (running Tor) I set a system wide proxy from Settings > Network > Network Proxy as below:
Socket Host: 127.0.0.1 9050
Tried some apps like web browsers and they indicated a changed ...
- 131
2
votes
1
answer
2k
views
Debian-based: torsocks + Chromium-browser = DNS Leakage?
System: latest Kali ( Debian-based )
$ torsocks chromium-browser
00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting.
00:00:00 ...
- 21
1
vote
2
answers
69k
views
Playing All Videos on Tor Safely
I am wondering how to play videos on Tor without compromising my ip. All help appreciated. Everything that I have read so far says doing so can compromise the system.
- 11
1
vote
1
answer
733
views
Is this JavaScript code dangerous?
I found this on a deepweb link. It looks like a bunch of random code, doesn't seem like it could do anything.. 7f7t73zmv3py5lfq.onion
function log(msg) {
document.getElementsByTagName("pre")[0]....
- 36
5
votes
1
answer
13k
views
How to configure apache for Tor hidden service
Which configuration file do I change in Apache to run it through Tor? I know you use:
Listen 127.0.0.1:8080;
Server_name 127.0.0.1:8080;
I think, but I don't have much experience with web hosting, ...
- 51
2
votes
1
answer
1k
views
Why did Tor quietly dropped suggestion to use HTML5 to watch video in youtube? Is some new leak or problem discovered?
Looking at Tor suggestions of how to watch youtube video, one has observed that the suggestion to use HTML5 to watch youtube video is quietly disappeared. Is some type of new leak, problem, and/or ...
- 3,256
2
votes
0
answers
54
views
If use virtualization, How possible is to get access to document files or get root access? [closed]
As far as I read, using TorBrowser with Tails, it's better than using only Tor, because Tails doesn't store any data on the Hard Disk, and because of leaks related to services running in background ...
- 21
1
vote
2
answers
380
views
Is it safe to use DNSCrypt along side TorBrowser Bundle?
I came across a different question where an answer mentioned DNSCrypt might cause issues with TBB (I don't have enough reputation to comment there and didn't what to hijack that question so I'm ...
- 33
1
vote
3
answers
164
views
Something Serious -TBB Leaking Location indirectly to Facebook
Yesterday I created a new Facebook profile with a fictitious name which does not make any sense, i.e. I chose a name like Regaldoes Mondwse and such names do not exist in my country. I was using TBB. ...
- 11
6
votes
1
answer
239
views
How do I report a security issue to the Tor project?
I have found a security issue in Tor which allows for information leakage in certain scenarios. I went to report this to the Tor project, but found nothing more than a bug tracker, and no obvious ...
- 63
9
votes
1
answer
3k
views
Why should users not use the same browser for both I2P and Tor?
In several forums and articles that I have read people say that the best security for users that want to run both Tor and I2P is to use separate browsers for each. What are the security and anonymity ...
- 361
10
votes
1
answer
415
views
Can I expect the Tor Browser Bundle not to leak information to the file system and to other applications?
Was the Tor Browser Bundle built with aim not to leak information to the file system (e.g. to temporary files), to the disk in general (e.g. to the swap) and by other means to other applications (e.g. ...
