Questions tagged [security]
Information about network security
439
questions
0
votes
0answers
28 views
TOR Security breaking NoScript
Since the last update, when set security is set to "Safest", NoScript in the TOR browser does not show all scripts in the drop down preventing them from being temp allowed.
When security is set to "...
0
votes
3answers
35 views
Hardening the network on the host
I’m trying to harden my host to not leak anything to clearnet.
I have an idea to get EntryNodes IP addresses from TorProject site, add them to iptables as allowed, and prohibit other traffic.
...
0
votes
1answer
41 views
How secure is it to use Tor on an outdated OSX
Hi :) I'm unable to update my OSX and it needs to be updated.
Does the fact that my OSX is outdated make TOR less secure to use?
1
vote
0answers
21 views
Can a router fake the communication to the next nodes on the path?
I have a theoretical question for understanding the safety of TOR:
When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do ...
0
votes
0answers
15 views
What is the difference between the fingerprint and v3ident in auth_dirs.c
auth_dirs contains a list of trusted directory authorities and consists of entrys such:
"moria1 orport=9101 "
"v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 "
"128.31.0.39:9131 9695 DFC3 5FFE ...
0
votes
1answer
152 views
Onion site illegal in my country. Can only visiting get me caught?
People hello,
When I visit onion website that are illegal inside my country can I get caught if I have highest security setting no java no script and only browse the website? No opening anything?
...
0
votes
1answer
107 views
What makes Onion sites more safe than regular html sites?
What exactly makes an .onion site more secure than a regular html based website, except that it is "hidden" and can't be taken down easily. For a user term, am I more safe when I visit a onion site ...
0
votes
0answers
16 views
Unable to connect Tor browser inside AD client
I'm trying to connect Tor inside the corporate IT network. The workstations are connected through the proxy server and firewall. When the connection failed with 'Connection timeout' error, I tried to ...
0
votes
1answer
44 views
AntiVirus Software - Potential security risk?
I have been wondering is running an Anti-Virus Software with a Firewall brings a security risk with it while using Tor.
I recently read about a free Anti-Virus software sold its Users browsing data. ...
0
votes
1answer
66 views
What is more safe - keep network connected or do connect-disconnect
If I need to go away for a while, then should I turn off cable/wifi, or to leave Tails connected?
First option looks better because physically disconnected, but multiple connect-disconnect can cause ...
0
votes
1answer
70 views
Is websites/services hosted on tor network safe?
I understand that a server can run services (such as nginx) then listen to localhost, then run Tor Server to create a unique tor address and accept traffic from other Tor Servers into it.
My question ...
0
votes
0answers
14 views
How to capture tor cells?
i have been reading in various papers that user is able to caputre tor cell packets and modify some bits or monitor them (RELAYCOMMANDBEGIN,RELAYCOMMANDDATA, RE-LAYCOMMANDEND, RELAYCOMMANDSENDME, RE-...
0
votes
1answer
94 views
Is watching a video less anonymous?
To my understanding of tor security, it works best if all users send short, equal-sized packets (requests, responses) into the tor network.
I'm wondering if I'm watching some video which takes quite ...
0
votes
0answers
32 views
How to make proxyxhains act as transparent proxy server
my proxychains is configured to use several proxy server and its work in localhost but i need to route all traffic of other hosts to routed through proxychains-host something link this:
my-host <&...
0
votes
2answers
104 views
Does my ISP know if I upload files to a specific site when im using tor/whonix? Can it track all the traffic?
As in the title.
I want to know If my ISP can see all the traffic if Its a brand new computer with no cookies and previous activities, using linux and a virtual machine - whonix and tor.
2
votes
1answer
153 views
Can we trust those who control the directory nodes of Tor?
(I feel insecure in my country after the relays I've been using turned out to be state-compromised. Now I'm starting to doubt the integrity of the directory nodes.)
Qu: How do we know for sure that ...
1
vote
0answers
24 views
using autentication with torsocks --address
On Linux, I noticed I can run torsocks by specifying --address so that it connects to another computer and use that computer's tor connection, e.g downloading a file over tor:
torsocks --address my....
0
votes
1answer
96 views
Tor app. through Google Play
I downloaded the Tor browser app. through Google play, is the app. safe and anonymous even though it's downloaded through Google?
0
votes
1answer
77 views
Does connecting to a normal website using tor work the same way as connecting to a hidden website?
When you connect to a normal website using tor, is the process of connecting to it the same as when you connect to a hidden website?
First you connect to the entry node, then middle node then exit ...
0
votes
1answer
43 views
Is there guarantee of privacy to buy onion hosting?
I see many people owning a onion site uses his own server (maybe just place the server in his home?)
But traditionally for a regular non-onion site we usually buy hosting. Can I buy hosting for a ...
0
votes
1answer
229 views
Is Tor completely anonymous?
I saw that tor has three layers of encryptions and, plus a VPN I set myself on my computer. How can someone trace back to my real IP? Is this completely anonymous?
3
votes
1answer
294 views
How did the FBI find the IP address of the Freedom Hosting servers?
The FBI took over the Freedom Hosting servers, which were located in France, and arrested the guy (Eric Eoin Marques) running Freedom Hosting. They then proceed to serve malware to anyone who ...
0
votes
0answers
59 views
Yubikey, TorBrowser and Google authentication
I am trying to add 2FA to my Google Account using TorBrowser.
I get to step 2: "Register your Security Key"
But here it just hangs. If I tap the key, it spits out a string like:
"...
1
vote
0answers
49 views
File Quarantined by Anti-Virus Software from the Latest Upgrade of Tor Browser
I upgraded to the lastest version of Tor browser 9.0, and my antivirus software 360 Safeguard reported the file nssdbm3.dll being infected by trojan win32/Trojan.7be
Could anybody tell me if this is ...
0
votes
0answers
200 views
Virus/Trojan in the update to TOR browser 9
After the last update to version 9, I got the message that mozavutil.dll and nssdbm3.dll are infected by Win32/Trojan.7be. (Scanengines Bitdefender and Avira)
0
votes
2answers
117 views
TOR questions and concerns
1) ISPs request bridges and blacklist them, that means obfs4 connections could be listed as Tor, does that mean the ISP is able to see the obfs4 IP and connect your activities to Tor just like ...
0
votes
0answers
21 views
QUBES digital signatures and key verification
How many using Qubes have actually verified the keys and certificates to the extent suggested below?
"Use the PGP Web of Trust. Check the key against different keyservers. Use different search ...
0
votes
2answers
112 views
Can a onion domain I register be discovered if I don't make it public?
This tutorial teaches how to register a hidden service and point it to a server's SSH port, so that we can keep this port closed on the open Internet and acess it from inside Tor network.
Of course ...
0
votes
0answers
93 views
How Do I Wipe Tails Free Space?
Can Tails get a virus?
I was and still am using tails.
After I visited a bitcoin site, I got a message that looked like it came from Tails saying you need to wipe your tails USB flash drive's free ...
0
votes
1answer
118 views
snap and apt usage to install the tor browser bundle?
Not to put too fine a point on it, but neither snap nor apt are suitable for installing current versions of the tor browser?
I see the downloads are available directly from the tor site.
0
votes
1answer
43 views
During installation of the Tor browser a unique asymmetric key pair is created and stored. Is this stored on the HDD/SSD and used repeatedly?
I would like to know where the unique asymmetric key pair is stored following installation of the Tor browser. Is it stored in the HDD/SSD and used repeatedly or in RAM and changed for each browsing ...
1
vote
1answer
82 views
Multiple outgoing connections from Tor browser
I see a lot of unknown outgoing connections from tor.exe to different IP addresses (about 6-7) every time Tor browser first connects to Internet after its installing. Only Tor entry guard remains with ...
0
votes
0answers
23 views
Windows update/fix ad while using TOR on youtube
I was using TOR yesterday (July 21, 2019) and received one of those ads right over the music video I was watching on youtube. This ad definitely looked like a scam - it would probably have downloaded ...
2
votes
1answer
555 views
Tor public key Provided object is too large
I try to import Tor browser public key like this
gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290
but I get error
pubring.kbx': Provided object is too large
I use debian ...
0
votes
2answers
274 views
Cash from the dark net?
Are any of these credit card sites and cash sites real?
I'd love to know some of them because I've been scrolling through websites and all I see is scam scam
0
votes
0answers
24 views
How to enter improperly configured/java script dependent websites without sacrificing a privacy?
I noticed warning, when entering some websites, losely it says this: "website owner configured website imrpoperly, continue for your own risk"... What if i need to enter some website, but i get this ...
2
votes
1answer
66 views
setting the security slider to medium
It says that setting the security slider of the torbrowser to medium disables the function which is dangerous. I would like to know what features are considered dangerous and why.
And if I set the ...
1
vote
1answer
118 views
Why guard and exit nodes are allowed to be from same country?
If one's connection is corrupted when your guard and exit node is the same person (that can then analyze your traffic and based on that figure out your IP), why does Tor allow them to be from the same ...
2
votes
1answer
201 views
Tor Browser Security
Immediately after downloading the Tor browser I went to the options page and saw that the 'Block dangerous and deceptive content' box under 'Deceptive Content and Dangerous Software Protection' was ...
0
votes
0answers
21 views
TOR crashed and left other USB thumb drive encrypted
I was browsing with TOR and I had a second USB drive plugged into the computer, I have previously saved data to that drive in other sessions but I did not write anything to the second USB during the ...
1
vote
1answer
40 views
Bookmark Removal
I am on Windows 10 with TBB version 8.0.8. I extracted the bundle to my desktop and used it form there for some time (Computer A). Of note, I created some bookmarks. I then moved the TBB folder to a ...
2
votes
1answer
175 views
Is it safe to have Java installed in my computer if I'm using the Tor browser?
Could Java somehow identify me? Should I uninstall Java from my computer if I want to use the Tor browser anonymously?
0
votes
0answers
84 views
Orbot shut down! In logs said “Definitely notthe fbi” What does that mean?
My Orbot App Stopped is Bootleg even though it was 100%. After it shit down it said " Definitely Not The Fbi" What Does this mean? Im assuming a warning. I Shut the process down. Cleared data and cut ...
0
votes
0answers
67 views
How does Tor protects from the list of Digital Finger Print
I have heard that Tor protects users from sites that try to fingerprint browsing history with its integration of NoScript. But it's not completely secure as some researchers claims.
Does Tor really ...
0
votes
2answers
377 views
How do I use tor network to access my email account
Is there anyway to use tor network to securely access me email accounts like with onion?
I use tor browser to access my email account and sent my self an email to another email service and it showed ...
0
votes
1answer
58 views
Is this what I need?
I tried to make an overseas payment using my Debit Card and it wouldn't go through. The error said "Did not pass gateway filter".
My question is, is Tor what I need to bypass this filter?
I have ...
0
votes
1answer
40 views
How to check for Spectre vulnerabilities and similar threats for my relay to be secure?
Setup
I'm running my new (2 days old) relay using:
my own dedicated server Dell T20 with hardware:
CPU: Intel Xeon E3-1225 v3 @ 3.20GHz (Haswell)
RAM: 32 GB DDR3 ECC
NET: overall maximum bandwidth ...
0
votes
1answer
19 views
Android messaging no longer works for me in Tor
I have used messages.android.com on Tor for a long time. Recently though after navigating to the website, a permission request popped up. Having never seen it before, I declined the permission. From ...
0
votes
0answers
282 views
How do I load Tor-Browser with Wayland?
Firefox functions in Fedora/CentOS with Wayland, Tor-Browser should too. No Xorg necessary. How do I launch Tor-Browser under Wayland? Thank you!
0
votes
1answer
317 views
Help with Tails signing key verification
Please help me verify the Tails signing key. Without having access to the web of trust, I'm trying to collect fingerprint data from multiple sources to be more certain that I've downloaded the ...
