Skip to main content

Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0 votes
1 answer
49 views

This person has a big doubt about Tor Browser

Imagine this: A person who is a secret agent was sent to another country for a secret mission, his own phone is locked to the local carrier in his country so he needs to buy a phone that can use the ...
DaleunSeun's user avatar
0 votes
1 answer
38 views

Why is my relay node acting as a client, extending and creating circuits simultaneously? i want your help!

I simulated a small Tor network using Docker.One DA,One Client,Three relays——relay1、relay2、relay3。when I run tor on relay nodes,I found that the relay node is attempting to create and extend circuits ...
samehada 's user avatar
0 votes
1 answer
187 views

Why do people discourage using Tor with a VPN?

Why do Tor experts discourage using Tor and a VPN at the same time? Is it because of the network fingerprint, latency, or that there is no point to it?
paranoidrunner's user avatar
0 votes
1 answer
92 views

And if DDoS attacks could enhance the anonymity of the Tor network?

The most effective approach for an attacker would be to establish Tor routing and send packets to trigger a chain reaction across 3 or more relays. Now, couldn’t these attacks potentially be an ...
setnit6's user avatar
0 votes
1 answer
63 views

Implications of using applications on Tor

There is an advice instructing to use compiled apps instead of webapps, since the former can be checked against checksums, unlike the latter which is susceptible to Javascript code injection. E.g: use ...
AvidSeeker's user avatar
0 votes
1 answer
121 views

Can a Hidden Service track you the same way an exit node can?

imagine if the onion service decided to be the malicious exit node itself. It’s not (Exit node) but could it travel back through its relays (possibly even skip) to the rendezvous point that track you ...
LimelightFaygo's user avatar
0 votes
1 answer
447 views

How can I disable Tor's automatic IP circuit renewal process?

I have an issue with this process when trying to log in or authenticate to a site where I only want to use the VPN and don't want the IP to change automatically at that time, as it interferes with the ...
Santi El Curioso's user avatar
2 votes
1 answer
115 views

How do TOR nodes select the CircID's when creating, or extending, a circuit?

I am coding my own version of TOR and I am trying to set up circuit management. I looked at the TOR spec and it says: To prevent CircID collisions, when one node sends a CREATE/CREATE2 cell to ...
saarmz's user avatar
  • 33
0 votes
1 answer
432 views

How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only

How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only (via PAC file) in a "normal" browser? I am aware that there is risk that .onion sites can still fingerprint me and/or ...
Lera Rosalene's user avatar
0 votes
1 answer
254 views

Tor Downloads/ Anonymity

I had a question regarding Downloading files Using the Tor software . Lets say you are a journalist and you were on some website on TOR (like a .onion) and you needed to download standard MP4/ PNG/ ...
Asked if Questions's user avatar
0 votes
1 answer
118 views

Security vulnerabilities for http login of self-hosted nextcloud server over tor?

After setting up my own Nextcloud server over tor, using a private .onion domain, and http, I am unsure about the security implications of using http in this setup. I learned one can buy a .onion ...
a.t.'s user avatar
  • 153
1 vote
2 answers
298 views

Being identified as running Tor exit relay. Constant capchas, security checks

I recently realized that while using TOR (TOR bundle) that a site that wouldn't block out anyone because they use Tor, has Cloudflare service stating that they need to check the security of my browser ...
Jason's user avatar
  • 11
0 votes
0 answers
91 views

Hidden service setup

Planning on starting my own hidden service but would want some advice regarding the security/privacy. Looking for someone with experience to be able to tell me from A to Z (from nothing to finished ...
random8493's user avatar
0 votes
1 answer
135 views

What's more safe in mode "Safer"?

From about:preferences in Security: Safer Disables website features that are often dangerous, causing some sites to lose functionality. JavaScript is disabled on non-HTTPS sites. Some fonts and math ...
Best Quality Vacuum's user avatar
1 vote
0 answers
190 views

Does "safer" security setting on Tor disable javascript on HTTP .onion sites?

In TOR manual we have the following: Safer (...) JavaScript is disabled on all non-HTTPS sites; some fonts and math symbols are disabled; audio and video (HTML5 media) are click-to-play. I was ...
greg_pio's user avatar
2 votes
2 answers
263 views

Tor safe when taking future in to account?

With quantum computing becoming better by the day I have a few questions. How viable and likely is it that an adversary to saves all tor traffic in order to decrypt it at a later date? When ...
Storm-e's user avatar
  • 21
0 votes
1 answer
61 views

Is Transmission Control Protocol of in a tamper proof (by 'tiny' explosions) device not the only way to circumvent transport correlation attacks?

Goal: I am trying to build an anonymous voting system and am wondering if Tor is sufficient to anonymize data by command-run-on(s), only when the proxy-onion-node has encrypted IP addresses that are ...
Nick Carducci for Carface Bank's user avatar
0 votes
1 answer
191 views

JavaScript exception when using "Safest" security profile in Tor

I'm using the "Safest" security profile in Tor (accessible via about:preferences). Here's one point in the description for that profile: JavaScript is disabled by default on all sites. (...
GPWR's user avatar
  • 115
1 vote
0 answers
113 views

Isn't deanonymization by having the entry and exit nodes in the same country a threat?

Consider the following scenario. I live in a repressive state A. On the other hand, the citizens of state A operate many Tor nodes. I am trying to call for demonstrations and criticize policies on ...
groscean's user avatar
0 votes
1 answer
93 views

Prevention of SYN flooding

I am curious how Tor can prevent SYN flooding attacks? From my understanding for a TCP handshake first a SYN has to be sent to the receiver. So why is it not possible to spam various SYN requests over ...
istayanonymous's user avatar
0 votes
1 answer
158 views

Does clicking on "new circuit for this site" too often risk deanonymization?

I have a (probably stupid) quirk/OCB: When I want my traffic to a website to be particularly hard to backtrace, I click dozens of times on the new circuit for this site button (sometimes for >15 ...
summerrain's user avatar
0 votes
1 answer
88 views

What prevents the first relay from decrypting the rest of the layers in the onion packet?

My understanding of Tor is that each relay peels back a layer and forwards what's left. But why can't the first relay simply unpeel all of the layers and see what the actual data is?
Shamoon's user avatar
  • 105
0 votes
1 answer
116 views

Rebuttal to Sven Taylor's article on Tor?

In October 2019, Sven Taylor published a sobering article titled Is Tor Trustworthy and Safe?. In it he argues that (numbering mine), US government agencies can de-anonymize Tor users on a “wide ...
Sam's user avatar
  • 1
0 votes
2 answers
157 views

Public network safe with TOR?

As I know, public networks are highly dangerous for normal people as hacker can obtain their private data. One way to prevent this is using a VPN, since after the connection everything is encrypted. ...
ZPlaya7's user avatar
0 votes
1 answer
28 views

For how long a node keep its key?

just a simple question: for how long every server of the net keep its private ? Or when every server change the key ? I ask this because if a hacker steal the keys of the entire network how long he ...
Lews's user avatar
  • 103
0 votes
2 answers
238 views

What precautions should I take if I want to use Tor to hide my traffic from my University?

I am student at university and use university internet. I am interested in using Tor to prevent my university from seeing what sites I visit and what I am doing on those sites. As I understand it now, ...
University Student's user avatar
0 votes
2 answers
330 views

Tor Detection IP Address different then other websites, help

Help Help HelpFirst question... In Parrot Security when I have both the Tor Browser connected and Anonsurf why do I have two different IP addresses. When I am in the browser and go to what is my IP ...
Rideboards's user avatar
0 votes
1 answer
107 views

What are the botnets that can be used on tor?

I am a student and want to study botnets on tor, so I would like to ask what are the botnets that can be used on tor, preferably controlled through C&C. It would be nice to have the source code of ...
gao's user avatar
  • 3
2 votes
2 answers
2k views

torsocks on macOS: ERROR: YYY is located in a directory protected by Apple's System Integrity Protection

I wish to tunnel CLI tools over tor network in macOS 11.5.2 None is working. I only installed torsocks, did no configuration. brew install torsocks torsocks whois example.com ERROR: /usr/bin/whois is ...
Sybil's user avatar
  • 260
0 votes
2 answers
229 views

Can Tor connection be intercepted/tampered by exit nodes?

Can exit node tamper traffic before sending it to endpoint? I know it can see it, but the question is, can connection be spoofed, if non-encrypted protocol is used, for example usual HTTP or even TCP ...
Vlad Havriuk's user avatar
0 votes
0 answers
58 views

Would this be a reasonably secure website?

If this is something for the Information Security Stack Exchange I understand. I want to know if this hypothetical setup is reasonably secure to the point where it can't be conventionally hacked ...
Cipher Visor's user avatar
0 votes
1 answer
52 views

Logging into profiles with Tor

I am reading that logging into diferent profiles on diferent platforms will make me loose my protection. But if i log out and start a new Tor session, shouldnt i appear as another person and regain my ...
Morten Fjellheim's user avatar
0 votes
0 answers
134 views

Encrypted DNS without Tor Browser Bundle

If using Tor and NOT Tor Browser Bundle, do you need to encrypt your dns or is setting your DNS on router to Cloudflare DNS sufficient? wanting to obfuscate all DNS from view of ISP
user1164394's user avatar
0 votes
1 answer
91 views

Is there a safe way to access this site

" https://thewest.com.au/digital-edition?utm_source=SSW&utm_medium=Referral&utm_campaign=digital-edition&utm_term=read-the-digital-edition&utm_content=top-nav " I am a paid ...
GAThomasz's user avatar
0 votes
1 answer
408 views

How to prevent DNS Spoofing attacks with Tor?

This question is an extension of How does Tor handle DNS poisoning. After having read Introducing DNS Resolver for Tor and DNS security issues, I am a bit concerned about the riscs of using Tor (...
cane_xmx3's user avatar
4 votes
0 answers
119 views

Tor hiden service ratelimits

While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
Culture's user avatar
  • 41
0 votes
3 answers
892 views

Why doesn't Tor browser block HTTP by default?

Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser ...
Swangie's user avatar
  • 984
1 vote
0 answers
201 views

How do onion services host anonymous chatrooms and what level of anonymity is present when using one?

There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
Swangie's user avatar
  • 984
1 vote
0 answers
206 views

Can you have a setup with both VPN over Tor and Tor over VPN

Is it possible to first connect to a VPN (like NordVPN or another VPN which supports VPN over Tor) that is preconfigured for Tor and then connect to a VPN once you are browsing in Tor to encrypt both ...
Swangie's user avatar
  • 984
1 vote
0 answers
548 views

How to be more anonymous and safe on Tor

Is it possible to more anonymous and on Tor than this setup and browsing method: Using Tails OS from USB which stores no data on hard drive Using Tor browser on safest mode Always automatically ...
Swangie's user avatar
  • 984
1 vote
1 answer
7k views

How does JavaScript interfere with Tor browser anonymity?

Heard that JavaScript interferes with Tor when browsing the internet causing a breach in its security wall, having the effect of a hole in the ozone layer. Why is this? How does this breach work ...
user610620's user avatar
0 votes
0 answers
117 views

Aren't public wi-fi hotspots still insecure for Tails and Tor users?

If connecting to public wi-fi with only Windows and Chrome already makes a user cautious of their activity, how much more of a shield is it to connect to the same public wi-fi with a Tails-Tor system? ...
user610620's user avatar
0 votes
2 answers
3k views

Never using Tails and Tor from home IP address but still caught

If a system using Tails and Tor always connects to public wifi in a city far away from someone's home IP address, what are all the different ways this would backfire such that authorities still manage ...
user610620's user avatar
0 votes
3 answers
361 views

Is there a way a website can identify me when connected to it via Orbot?

When using Orbot and not coupled with Tor browser, but rather through Google Chrome or Firefox, can a website I visit de-anonymize me? Particularly know anything about my location, IP, service ...
JJrussel's user avatar
  • 111
0 votes
1 answer
184 views

HTTPS Everywhere doesn't work all the time

I tried to access http://uniquemachine.org and tor-browser/HTTPSeverywhere-add-on reached it without warning me. Would you know why ? How to automatically warn me at every single http:// i'm trying to ...
user31542's user avatar
0 votes
1 answer
234 views

Reusing a Tor "dirty" circuit

I have a couple of questions related to Tor circuits. Let's say that there is a circuit that was used and marked "dirty" and has also expired (no active TCP stream). Can this circuit ever ...
Arushi Arora's user avatar
0 votes
2 answers
689 views

I want to hear opinions about the chain: VPN1==>TOR==>VPN2==>TOR (using Kodachi Linux with USB + Kodachi Linux with Virtualbox)

I would like to hear your opinion about this connection chain, what can you say anonymously and whether it is secure. Boot Linux Kodachi in Live mode from USB Turn on a reliable VPN1 After that I ...
Hustoni's user avatar
2 votes
1 answer
43 views

Should I first stop all local servers running on localhost before starting Tor?

If I have apache/mysql and the PHP built-in server running on localhost, should I first stop the local server before starting Tor, or is it totally safe? As in, can someone access my computer/sever/...
matronator's user avatar
0 votes
1 answer
118 views

Locking down the browser to the max

What extensions and settings must be added to the browser to make it as private and secure as possible? I know that the answer to this probably changes a lot as security changes. But so far what I ...
Cipher Visor's user avatar
0 votes
1 answer
839 views

tor log shows ignoring ExcludeNodes?

Tor Log says: [WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes. and [NOTICE] Opened Socks listener on 127.0.0.1:9150 It minds that my tor, conexion/router have been hacked? To put you ...
user406126's user avatar

1
2 3 4 5
10