Questions tagged [security]
Information about network security
475
questions
0
votes
1answer
36 views
Does clicking on "new circuit for this site" too often risk deanonymization?
I have a (probably stupid) quirk/OCB: When I want my traffic to a website to be particularly hard to backtrace, I click dozens of times on the new circuit for this site button (sometimes for >15 ...
0
votes
1answer
46 views
What prevents the first relay from decrypting the rest of the layers in the onion packet?
My understanding of Tor is that each relay peels back a layer and forwards what's left. But why can't the first relay simply unpeel all of the layers and see what the actual data is?
0
votes
1answer
54 views
Rebuttal to Sven Taylor's article on Tor?
In October 2019, Sven Taylor published a sobering article titled Is Tor Trustworthy and Safe?. In it he argues that (numbering mine),
US government agencies can de-anonymize Tor users on a “wide ...
0
votes
2answers
44 views
Public network safe with TOR?
As I know, public networks are highly dangerous for normal people as hacker can obtain their private data. One way to prevent this is using a VPN, since after the connection everything is encrypted.
...
0
votes
1answer
22 views
For how long a node keep its key?
just a simple question:
for how long every server of the net keep its private ? Or when every server change the key ?
I ask this because if a hacker steal the keys of the entire network how long he ...
0
votes
2answers
148 views
What precautions should I take if I want to use Tor to hide my traffic from my University?
I am student at university and use university internet. I am interested in using Tor to prevent my university from seeing what sites I visit and what I am doing on those sites. As I understand it now, ...
0
votes
2answers
60 views
Tor Detection IP Address different then other websites, help
Help Help HelpFirst question... In Parrot Security when I have both the Tor Browser connected and Anonsurf why do I have two different IP addresses. When I am in the browser and go to what is my IP ...
0
votes
0answers
89 views
Security question regareding Tor & Anonsurf
So I have been using Parrot Security lately and I have a couple security questions regarding Tor/Anonsurf. First, when I boot up Parrot and open the Tor Browser and click connect, Tor connects, then ...
0
votes
1answer
38 views
What are the botnets that can be used on tor?
I am a student and want to study botnets on tor, so I would like to ask what are the botnets that can be used on tor, preferably controlled through C&C. It would be nice to have the source code of ...
0
votes
2answers
237 views
torsocks on macOS: ERROR: YYY is located in a directory protected by Apple's System Integrity Protection
I wish to tunnel CLI tools over tor network in macOS 11.5.2
None is working.
I only installed torsocks, did no configuration.
brew install torsocks
torsocks whois example.com
ERROR: /usr/bin/whois is ...
0
votes
2answers
104 views
Can Tor connection be intercepted/tampered by exit nodes?
Can exit node tamper traffic before sending it to endpoint? I know it can see it, but the question is, can connection be spoofed, if non-encrypted protocol is used, for example usual HTTP or even TCP ...
0
votes
0answers
61 views
Tor and i2p tradeoffs
Bitcoin Core supports running onion service and recently added i2p. I want to understand the trade-offs in using different combinations of networks, so asked a question in Bitcoin SE earlier: https://...
0
votes
0answers
49 views
Would this be a reasonably secure website?
If this is something for the Information Security Stack Exchange I understand. I want to know if this hypothetical setup is reasonably secure to the point where it can't be conventionally hacked ...
0
votes
1answer
36 views
Logging into profiles with Tor
I am reading that logging into diferent profiles on diferent platforms will make me loose my protection.
But if i log out and start a new Tor session, shouldnt i appear as another person and regain my ...
0
votes
0answers
24 views
.jar scrapping app in tails
morning.
im finishing java app to scrap few websites. its gonna be runnable jar file.
my goals: do it over tor network & keep security and privacy of tails.
my questions:
since tails is sending ...
0
votes
0answers
46 views
"Brave will open onion service of the website when available or .onion domain in Tor window"
I downloaded the Brave browser and the it is an option within its settings to open an .onion domain in a Tor window. However I do not have Tor downloaded on my device. I read one article that said to ...
0
votes
0answers
18 views
Tunneling RDP under obsf4
I want to run tunnel between my local and RDP under obsf4 bridge.
Can anyone explain me how can i do this?
I use ubuntu, and krdc to connect on rdp.
Thanks!
0
votes
0answers
51 views
Encrypted DNS without Tor Browser Bundle
If using Tor and NOT Tor Browser Bundle, do you need to encrypt your dns or is setting your DNS on router to Cloudflare DNS sufficient?
wanting to obfuscate all DNS from view of ISP
0
votes
1answer
78 views
Is there a safe way to access this site
" https://thewest.com.au/digital-edition?utm_source=SSW&utm_medium=Referral&utm_campaign=digital-edition&utm_term=read-the-digital-edition&utm_content=top-nav "
I am a paid ...
0
votes
1answer
106 views
How to prevent DNS Spoofing attacks with Tor?
This question is an extension of How does Tor handle DNS poisoning.
After having read Introducing DNS Resolver for Tor and DNS security issues, I am a bit concerned about the riscs of using Tor (...
4
votes
0answers
71 views
Tor hiden service ratelimits
While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
0
votes
1answer
193 views
Why doesn't Tor browser block HTTP by default?
Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser ...
1
vote
0answers
87 views
How do onion services host anonymous chatrooms and what level of anonymity is present when using one?
There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
1
vote
0answers
133 views
Can you have a setup with both VPN over Tor and Tor over VPN
Is it possible to first connect to a VPN (like NordVPN or another VPN which supports VPN over Tor) that is preconfigured for Tor and then connect to a VPN once you are browsing in Tor to encrypt both ...
1
vote
0answers
229 views
How to be more anonymous and safe on Tor
Is it possible to more anonymous and on Tor than this setup and browsing method:
Using Tails OS from USB which stores no data on hard drive
Using Tor browser on safest mode
Always automatically ...
0
votes
1answer
706 views
How does JavaScript interfere with Tor browser anonymity?
Heard that JavaScript interferes with Tor when browsing the internet causing a breach in its security wall, having the effect of a hole in the ozone layer. Why is this? How does this breach work ...
0
votes
0answers
59 views
Aren't public wi-fi hotspots still insecure for Tails and Tor users?
If connecting to public wi-fi with only Windows and Chrome already makes a user cautious of their activity, how much more of a shield is it to connect to the same public wi-fi with a Tails-Tor system? ...
0
votes
2answers
585 views
Never using Tails and Tor from home IP address but still caught
If a system using Tails and Tor always connects to public wifi in a city far away from someone's home IP address, what are all the different ways this would backfire such that authorities still manage ...
0
votes
3answers
154 views
Is there a way a website can identify me when connected to it via Orbot?
When using Orbot and not coupled with Tor browser, but rather through Google Chrome or Firefox, can a website I visit de-anonymize me? Particularly know anything about my location, IP, service ...
0
votes
1answer
97 views
HTTPS Everywhere doesn't work all the time
I tried to access http://uniquemachine.org and tor-browser/HTTPSeverywhere-add-on reached it without warning me.
Would you know why ?
How to automatically warn me at every single http:// i'm trying to ...
0
votes
1answer
80 views
Reusing a Tor "dirty" circuit
I have a couple of questions related to Tor circuits.
Let's say that there is a circuit that was used and marked "dirty" and has also expired (no active TCP stream). Can this circuit ever ...
0
votes
2answers
276 views
I want to hear opinions about the chain: VPN1==>TOR==>VPN2==>TOR (using Kodachi Linux with USB + Kodachi Linux with Virtualbox)
I would like to hear your opinion about this connection chain, what can you say anonymously and whether it is secure.
Boot Linux Kodachi in Live mode from USB
Turn on a reliable VPN1
After that I ...
2
votes
1answer
26 views
Should I first stop all local servers running on localhost before starting Tor?
If I have apache/mysql and the PHP built-in server running on localhost, should I first stop the local server before starting Tor, or is it totally safe? As in, can someone access my computer/sever/...
0
votes
1answer
52 views
Locking down the browser to the max
What extensions and settings must be added to the browser to make it as private and secure as possible? I know that the answer to this probably changes a lot as security changes. But so far what I ...
0
votes
1answer
199 views
tor log shows ignoring ExcludeNodes?
Tor Log says:
[WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes.
and
[NOTICE] Opened Socks listener on 127.0.0.1:9150
It minds that my tor, conexion/router have been hacked?
To put you ...
0
votes
1answer
206 views
If I upload an image using Tor on Pinterest, would anyone know it was I?
I created an account on Pinterest Using Tor Browser. Then I uploaded an image from my phone on Pinterest(Tor Browser), would anyone know it was me who uploaded the image?
0
votes
1answer
599 views
Viewing videos using Tor Browser & anonimity
In some security guides listed that when you watching videos via Tor your real IP gets or might be disclosed.
One of them says "You should turn off media.play-stand-alone and peerconnection....
0
votes
1answer
113 views
What if one entity controls all three Tor nodes?
If anybody is able to make themselves a Tor server, what is to stop a security agency from populating the list of Tor servers with many of their own? If they have enough servers there, then might they ...
0
votes
1answer
77 views
Why can't a modified guard node compromise the network?
This is a newbie and probably a lame question but it popped up while I was reading the design doc: https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf
If theoretically someone ...
0
votes
1answer
88 views
Is there a less privacy-invasive way to automate checking whether Tor is being used on the machine than this?
I currently make a HTTPS request to: https://check.torproject.org/
I then check if the output contains this anywhere:
Congratulations. This browser is configured to use Tor.
If it does, I return &...
0
votes
1answer
425 views
Tor Browser Bundle failing userAgent spoofing
Using Tor Browser Bundle, I noticed the latest versions I have (9x) did not show user agent in the general.userAgent.override entry in about:config. The browser was downloaded from the Tor Project and ...
0
votes
2answers
534 views
is it safe to download Tor browser from other browser
1.i just learnt about Tor, and i'd like to know where is the best place to download Tor browser,i feel downloading from the google play store or another browser might have a negative effect on the ...
1
vote
0answers
184 views
Firefox Multi-Account Containers on Tor
Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
0
votes
1answer
112 views
Is the Hidden Answers onion service authentic?
I've been wondering if Hidden Answers is legitimate. Can I talk about anything on that forum no matter how unlawful it may sound? Really I want to know if it it has connections to Law Enforcement or ...
0
votes
1answer
449 views
Has Tor Browser stopped displaying circuits?
I started using Tor v4 most intrigued by the display of the circuit path it followed, 4 nodes from at least 2 countries and usually 3 or 4.
Now at v9 I don't see it anymore. Has display of the ...
0
votes
3answers
74 views
Hardening the network on the host
I’m trying to harden my host to not leak anything to clearnet.
I have an idea to get EntryNodes IP addresses from TorProject site, add them to iptables as allowed, and prohibit other traffic.
...
0
votes
2answers
98 views
How secure is it to use Tor on an outdated OSX
Hi :) I'm unable to update my OSX and it needs to be updated.
Does the fact that my OSX is outdated make TOR less secure to use?
1
vote
0answers
23 views
Can a router fake the communication to the next nodes on the path?
I have a theoretical question for understanding the safety of TOR:
When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do ...
1
vote
0answers
65 views
What is the difference between the fingerprint and v3ident in auth_dirs.c
auth_dirs contains a list of trusted directory authorities and consists of entrys such:
"moria1 orport=9101 "
"v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 "
"128.31.0.39:9131 9695 DFC3 5FFE ...
0
votes
1answer
207 views
Onion site illegal in my country. Can only visiting get me caught?
People hello,
When I visit onion website that are illegal inside my country can I get caught if I have highest security setting no java no script and only browse the website? No opening anything?
...
