Questions tagged [information-leaks]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
39 views

Why do I get connected to TOR nodes that I excluded in TORRC?

I'm testing the TOR browser bundle and I keep getting connected to exit nodes in countries that I've explicitly excluded in my torrc: StrictNodes 1 ExcludeExitNodes {ad},{ar},{au},{at},{bs},{by},{be},...
0
votes
0answers
86 views

How does Tor protects from the list of Digital Finger Print

I have heard that Tor protects users from sites that try to fingerprint browsing history with its integration of NoScript. But it's not completely secure as some researchers claims. Does Tor really ...
0
votes
1answer
182 views

iplocation.net Reports the Same Proxy, TorBrowser or Firefox (non-tor)

The site https://www.iplocation.net/find-ip-address (What is my IP?) reports an IP address, and two proxy addresses. One of the two proxy addresses is the same from TorBrowser or from Firefox (non-...
0
votes
1answer
78 views

Protect against pseudonymous identity activity on a forum and traffic correlation?

I use Tor when I need to use a pseudonymous account on a forum. A observer can see when I connect to Tor and correlate with activity of the account from the forum How I can protect against this ?
1
vote
1answer
712 views

nginx leaks my hidden service port number

I have my .onion service running: http://oeptyn6jtusgda63.onion/ When i try to open wrong link, my TorBrowser shows me an error like this: Firefox can’t establish a connection to the server at ...
0
votes
2answers
273 views

How to Detect Tor Usage From Old Network Traces?

As part of some computer forensics work, I have been asked to look at network traces (showing IP addresses and port numbers) from several years ago, to see if someone was using Tor. I have heard that ...
2
votes
0answers
242 views

Nginx directory disclosures?

I'm dealing with a minor information disclosure when using nginx with onions. Servervault.com might be better suited for an nginx question, but I'm not sure a lot of those guys understand onions or ...
1
vote
0answers
43 views

What blog services work well on Tor

I´ve tried to create blog accounts using Tor. They always fail at some point. For example: Wordpress: the confirmation mail doesn't include the link necessary to confirm. Ghost: I registered ...
3
votes
1answer
2k views

cURL and wget with Tor

What information about me (not the exit node) is revealed when a request originating from cURL / wget is proxied through Tor? Example: curl https://example.com/ --socks5 localhost:9150 -H "User-...
0
votes
2answers
111 views

Location fetch of a website via Firefox while mobile hotspot is ON throghTOR

I understand that for best security Tor needs to be used along with Tor browser. Sometimes I do not use Tor browser and I configure Firefox to use SOCKS5 proxy. The following happened while I was ...
7
votes
1answer
389 views

List of attacks that try to trick browser to not use SOCKS/Tor

I've heard it called "disbanding" attacks where the attacker induces a client into not routing a connection over Tor. Basically all of the things that the TBB protects against. Examples might be ...
1
vote
1answer
671 views

Does traffic still go through Tor with this Exception Error in aria2c?

On Ubuntu (running Tor) I set a system wide proxy from Settings > Network > Network Proxy as below: Socket Host: 127.0.0.1 9050 Tried some apps like web browsers and they indicated a changed ...
2
votes
1answer
1k views

Debian-based: torsocks + Chromium-browser = DNS Leakage?

System: latest Kali ( Debian-based ) $ torsocks chromium-browser 00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting. 00:00:00 ...
1
vote
2answers
64k views

Playing All Videos on Tor Safely

I am wondering how to play videos on Tor without compromising my ip. All help appreciated. Everything that I have read so far says doing so can compromise the system.
1
vote
1answer
704 views

Is this JavaScript code dangerous?

I found this on a deepweb link. It looks like a bunch of random code, doesn't seem like it could do anything.. 7f7t73zmv3py5lfq.onion function log(msg) { document.getElementsByTagName("pre")[0]....
5
votes
1answer
11k views

How to configure apache for Tor hidden service

Which configuration file do I change in Apache to run it through Tor? I know you use: Listen 127.0.0.1:8080; Server_name 127.0.0.1:8080; I think, but I don't have much experience with web hosting, ...
2
votes
1answer
1k views

Why did Tor quietly dropped suggestion to use HTML5 to watch video in youtube? Is some new leak or problem discovered?

Looking at Tor suggestions of how to watch youtube video, one has observed that the suggestion to use HTML5 to watch youtube video is quietly disappeared. Is some type of new leak, problem, and/or ...
2
votes
0answers
51 views

If use virtualization, How possible is to get access to document files or get root access? [closed]

As far as I read, using TorBrowser with Tails, it's better than using only Tor, because Tails doesn't store any data on the Hard Disk, and because of leaks related to services running in background ...
1
vote
2answers
354 views

Is it safe to use DNSCrypt along side TorBrowser Bundle?

I came across a different question where an answer mentioned DNSCrypt might cause issues with TBB (I don't have enough reputation to comment there and didn't what to hijack that question so I'm ...
1
vote
3answers
155 views

Something Serious -TBB Leaking Location indirectly to Facebook

Yesterday I created a new Facebook profile with a fictitious name which does not make any sense, i.e. I chose a name like Regaldoes Mondwse and such names do not exist in my country. I was using TBB. ...
6
votes
1answer
220 views

How do I report a security issue to the Tor project?

I have found a security issue in Tor which allows for information leakage in certain scenarios. I went to report this to the Tor project, but found nothing more than a bug tracker, and no obvious ...
9
votes
1answer
3k views

Why should users not use the same browser for both I2P and Tor?

In several forums and articles that I have read people say that the best security for users that want to run both Tor and I2P is to use separate browsers for each. What are the security and anonymity ...
10
votes
1answer
391 views

Can I expect the Tor Browser Bundle not to leak information to the file system and to other applications?

Was the Tor Browser Bundle built with aim not to leak information to the file system (e.g. to temporary files), to the disk in general (e.g. to the swap) and by other means to other applications (e.g. ...