Questions tagged [security]
Information about network security
467
questions
3
votes
0answers
25 views
Tor hiden service ratelimits
While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
0
votes
1answer
74 views
Why doesn't Tor browser block HTTP by default?
Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser ...
1
vote
0answers
49 views
How do onion services host anonymous chatrooms and what level of anonymity is present when using one?
There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
1
vote
0answers
113 views
Can you have a setup with both VPN over Tor and Tor over VPN
Is it possible to first connect to a VPN (like NordVPN or another VPN which supports VPN over Tor) that is preconfigured for Tor and then connect to a VPN once you are browsing in Tor to encrypt both ...
1
vote
0answers
150 views
How to be more anonymous and safe on Tor
Is it possible to more anonymous and on Tor than this setup and browsing method:
Using Tails OS from USB which stores no data on hard drive
Using Tor browser on safest mode
Always automatically ...
0
votes
1answer
62 views
How does JavaScript interfere with Tor browser anonymity?
Heard that JavaScript interferes with Tor when browsing the internet causing a breach in its security wall, having the effect of a hole in the ozone layer. Why is this? How does this breach work ...
0
votes
0answers
14 views
Besides MAC address, how else do public wi-fi networks identify connected hardware devices?
The list of connected WLAN clients (users) on my wi-fi only gives the following fields per user:
Duration of time connected
IP address
MAC address
Device name
The last two fields are always unique ...
0
votes
0answers
46 views
Aren't public wi-fi hotspots still insecure for Tails and Tor users?
If connecting to public wi-fi with only Windows and Chrome already makes a user cautious of their activity, how much more of a shield is it to connect to the same public wi-fi with a Tails-Tor system? ...
0
votes
2answers
205 views
Never using Tails and Tor from home IP address but still caught
If a system using Tails and Tor always connects to public wifi in a city far away from someone's home IP address, what are all the different ways this would backfire such that authorities still manage ...
0
votes
2answers
77 views
Is there a way a website can identify me when connected to it via Orbot?
When using Orbot and not coupled with Tor browser, but rather through Google Chrome or Firefox, can a website I visit de-anonymize me? Particularly know anything about my location, IP, service ...
0
votes
1answer
48 views
HTTPS Everywhere doesn't work all the time
I tried to access http://uniquemachine.org and tor-browser/HTTPSeverywhere-add-on reached it without warning me.
Would you know why ?
How to automatically warn me at every single http:// i'm trying to ...
0
votes
0answers
29 views
Sync a machine's firefox bookmarks to a tor browser
Is there a way to periodically pull a linux machine's firefox bookmarks to a linux tor browser ?
I mean pull and not sync because I want the URL ending in .onion that I saved in tor browser to stay ...
0
votes
1answer
47 views
Reusing a Tor “dirty” circuit
I have a couple of questions related to Tor circuits.
Let's say that there is a circuit that was used and marked "dirty" and has also expired (no active TCP stream). Can this circuit ever ...
0
votes
1answer
72 views
I want to hear opinions about the chain: VPN1==>TOR==>VPN2==>TOR (using Kodachi Linux with USB + Kodachi Linux with Virtualbox)
I would like to hear your opinion about this connection chain, what can you say anonymously and whether it is secure.
Boot Linux Kodachi in Live mode from USB
Turn on a reliable VPN1
After that I ...
0
votes
0answers
10 views
open ports in nodes
Recently have scanned exit nodes a couple of times, and find that where few ports opened there.
Should one be worried if there are nodes with open ports in the circuit, or doesn't suit any effect on ...
2
votes
1answer
17 views
Should I first stop all local servers running on localhost before starting Tor?
If I have apache/mysql and the PHP built-in server running on localhost, should I first stop the local server before starting Tor, or is it totally safe? As in, can someone access my computer/sever/...
0
votes
0answers
8 views
Loading slow & times out
Solutions only for developers. Useless for individuals. Please prove to me that if resolved for individuals, some of whom are also developers, none of those developers are or could be scammers.
The ...
0
votes
1answer
32 views
Locking down the browser to the max
What extensions and settings must be added to the browser to make it as private and secure as possible? I know that the answer to this probably changes a lot as security changes. But so far what I ...
0
votes
0answers
34 views
Safety of V2/V3 onions
I have 1 question, lets suppose the attacker got the 1 and the 3rd nodes of Tor circuit.
Does using of V3 onion gives us some security benefits? Can attacker be able to disclose V2/V3 resource we are ...
0
votes
0answers
23 views
reduced attack surface when using a minimal window manager for tails?
I'd like to use an alternative window manager (WM) in TAILS.
Currently TAILS ships with GNOME, which is a feature-rich and (relatively) user-friendly desktop environment. The reason why the TAILS-team ...
0
votes
1answer
56 views
tor log shows ignoring ExcludeNodes?
Tor Log says:
[WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes.
and
[NOTICE] Opened Socks listener on 127.0.0.1:9150
It minds that my tor, conexion/router have been hacked?
To put you ...
0
votes
1answer
112 views
If I upload an image using Tor on Pinterest, would anyone know it was I?
I created an account on Pinterest Using Tor Browser. Then I uploaded an image from my phone on Pinterest(Tor Browser), would anyone know it was me who uploaded the image?
0
votes
1answer
201 views
Viewing videos using Tor Browser & anonimity
In some security guides listed that when you watching videos via Tor your real IP gets or might be disclosed.
One of them says "You should turn off media.play-stand-alone and peerconnection....
0
votes
0answers
29 views
Does webrtc and other leaks can be done when scripts is allowed?
Unfortunately, I don't understand correctly how this all things work, but can my IP be leaked when I, for example, clicking to ''allow'' noscript to play http://videoabcd1234.mp4 Can it be run via ...
0
votes
1answer
85 views
What if one entity controls all three Tor nodes?
If anybody is able to make themselves a Tor server, what is to stop a security agency from populating the list of Tor servers with many of their own? If they have enough servers there, then might they ...
0
votes
1answer
55 views
Why can't a modified guard node compromise the network?
This is a newbie and probably a lame question but it popped up while I was reading the design doc: https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf
If theoretically someone ...
0
votes
1answer
54 views
Is there a less privacy-invasive way to automate checking whether Tor is being used on the machine than this?
I currently make a HTTPS request to: https://check.torproject.org/
I then check if the output contains this anywhere:
Congratulations. This browser is configured to use Tor.
If it does, I return &...
0
votes
1answer
145 views
Tor Browser Bundle failing userAgent spoofing
Using Tor Browser Bundle, I noticed the latest versions I have (9x) did not show user agent in the general.userAgent.override entry in about:config. The browser was downloaded from the Tor Project and ...
0
votes
0answers
43 views
Resources for Learning Tor Prerequisite Knowledge
While the basic concept of Tor as an anonymity tool is intuitive, most of the literature describing Tor at a lower level is pretty heavily intertwined with computer networking and security concepts.
...
0
votes
0answers
31 views
Security implications for the Tor network if someone run a large IoT network as hidden services
Hypothetically, this is just my curiosity: What would be the security implication if some company decides that Tor hidden service is a good way to solve the NAT issue in IoT (that most IoT devices are ...
0
votes
2answers
199 views
is it safe to download Tor browser from other browser
1.i just learnt about Tor, and i'd like to know where is the best place to download Tor browser,i feel downloading from the google play store or another browser might have a negative effect on the ...
0
votes
0answers
46 views
Changing Security Level per site?
I've had quite a few instances browsing .onions that require Javascript to be enabled (protonmail, for example).
I don't believe there is a way to configure this directly in Tor browser settings, so ...
1
vote
0answers
90 views
Firefox Multi-Account Containers on Tor
Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
0
votes
0answers
51 views
fix localhost:8080 not connecting but 127.0.0.1 connects
I am currently trying to host my own forum on darkweb with mybb.
I have followed LAMP server setup on digital ocean and then it's guide to install mybb.
I have changed all the your domain to my onion ...
0
votes
1answer
63 views
Is the Hidden Answers onion service authentic?
I've been wondering if Hidden Answers is legitimate. Can I talk about anything on that forum no matter how unlawful it may sound? Really I want to know if it it has connections to Law Enforcement or ...
0
votes
1answer
132 views
Has Tor Browser stopped displaying circuits?
I started using Tor v4 most intrigued by the display of the circuit path it followed, 4 nodes from at least 2 countries and usually 3 or 4.
Now at v9 I don't see it anymore. Has display of the ...
0
votes
0answers
73 views
TOR Security breaking NoScript
Since the last update, when set security is set to "Safest", NoScript in the TOR browser does not show all scripts in the drop down preventing them from being temp allowed.
When security is set to "...
0
votes
3answers
62 views
Hardening the network on the host
I’m trying to harden my host to not leak anything to clearnet.
I have an idea to get EntryNodes IP addresses from TorProject site, add them to iptables as allowed, and prohibit other traffic.
...
0
votes
1answer
61 views
How secure is it to use Tor on an outdated OSX
Hi :) I'm unable to update my OSX and it needs to be updated.
Does the fact that my OSX is outdated make TOR less secure to use?
1
vote
0answers
21 views
Can a router fake the communication to the next nodes on the path?
I have a theoretical question for understanding the safety of TOR:
When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do ...
1
vote
0answers
36 views
What is the difference between the fingerprint and v3ident in auth_dirs.c
auth_dirs contains a list of trusted directory authorities and consists of entrys such:
"moria1 orport=9101 "
"v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 "
"128.31.0.39:9131 9695 DFC3 5FFE ...
0
votes
1answer
187 views
Onion site illegal in my country. Can only visiting get me caught?
People hello,
When I visit onion website that are illegal inside my country can I get caught if I have highest security setting no java no script and only browse the website? No opening anything?
...
0
votes
1answer
274 views
What makes Onion sites more safe than regular html sites?
What exactly makes an .onion site more secure than a regular html based website, except that it is "hidden" and can't be taken down easily. For a user term, am I more safe when I visit a onion site ...
0
votes
0answers
24 views
Unable to connect Tor browser inside AD client
I'm trying to connect Tor inside the corporate IT network. The workstations are connected through the proxy server and firewall. When the connection failed with 'Connection timeout' error, I tried to ...
0
votes
1answer
96 views
AntiVirus Software - Potential security risk?
I have been wondering is running an Anti-Virus Software with a Firewall brings a security risk with it while using Tor.
I recently read about a free Anti-Virus software sold its Users browsing data. ...
0
votes
1answer
108 views
What is more safe - keep network connected or do connect-disconnect
If I need to go away for a while, then should I turn off cable/wifi, or to leave Tails connected?
First option looks better because physically disconnected, but multiple connect-disconnect can cause ...
0
votes
1answer
85 views
Is websites/services hosted on tor network safe?
I understand that a server can run services (such as nginx) then listen to localhost, then run Tor Server to create a unique tor address and accept traffic from other Tor Servers into it.
My question ...
0
votes
1answer
126 views
Is watching a video less anonymous?
To my understanding of tor security, it works best if all users send short, equal-sized packets (requests, responses) into the tor network.
I'm wondering if I'm watching some video which takes quite ...
0
votes
2answers
152 views
Does my ISP know if I upload files to a specific site when im using tor/whonix? Can it track all the traffic?
As in the title.
I want to know If my ISP can see all the traffic if Its a brand new computer with no cookies and previous activities, using linux and a virtual machine - whonix and tor.
2
votes
1answer
225 views
Can we trust those who control the directory nodes of Tor?
(I feel insecure in my country after the relays I've been using turned out to be state-compromised. Now I'm starting to doubt the integrity of the directory nodes.)
Qu: How do we know for sure that ...
