Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

Safety of V2/V3 onions

I have 1 question, lets suppose the attacker got the 1 and the 3rd nodes of Tor circuit. Does using of V3 onion gives us some security benefits? Can attacker be able to disclose V2/V3 resource we are ...
0
votes
0answers
16 views

reduced attack surface when using a minimal window manager for tails?

I'd like to use an alternative window manager (WM) in TAILS. Currently TAILS ships with GNOME, which is a feature-rich and (relatively) user-friendly desktop environment. The reason why the TAILS-team ...
0
votes
1answer
26 views

tor log shows ignoring ExcludeNodes?

Tor Log says: [WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes. and [NOTICE] Opened Socks listener on 127.0.0.1:9150 It minds that my tor, conexion/router have been hacked? To put you ...
0
votes
1answer
86 views

If I upload an image using Tor on Pinterest, would anyone know it was I?

I created an account on Pinterest Using Tor Browser. Then I uploaded an image from my phone on Pinterest(Tor Browser), would anyone know it was me who uploaded the image?
0
votes
1answer
162 views

Viewing videos using Tor Browser & anonimity

In some security guides listed that when you watching videos via Tor your real IP gets or might be disclosed. One of them says "You should turn off media.play-stand-alone and peerconnection....
0
votes
0answers
20 views

Does webrtc and other leaks can be done when scripts is allowed?

Unfortunately, I don't understand correctly how this all things work, but can my IP be leaked when I, for example, clicking to ''allow'' noscript to play http://videoabcd1234.mp4 Can it be run via ...
0
votes
1answer
66 views

What if one entity controls all three Tor nodes?

If anybody is able to make themselves a Tor server, what is to stop a security agency from populating the list of Tor servers with many of their own? If they have enough servers there, then might they ...
0
votes
1answer
53 views

Why can't a modified guard node compromise the network?

This is a newbie and probably a lame question but it popped up while I was reading the design doc: https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf If theoretically someone ...
0
votes
1answer
37 views

Is there a less privacy-invasive way to automate checking whether Tor is being used on the machine than this?

I currently make a HTTPS request to: https://check.torproject.org/ I then check if the output contains this anywhere: Congratulations. This browser is configured to use Tor. If it does, I return &...
0
votes
1answer
68 views

Tor Browser Bundle failing userAgent spoofing

Using Tor Browser Bundle, I noticed the latest versions I have (9x) did not show user agent in the general.userAgent.override entry in about:config. The browser was downloaded from the Tor Project and ...
0
votes
0answers
40 views

Resources for Learning Tor Prerequisite Knowledge

While the basic concept of Tor as an anonymity tool is intuitive, most of the literature describing Tor at a lower level is pretty heavily intertwined with computer networking and security concepts. ...
0
votes
0answers
29 views

Security implications for the Tor network if someone run a large IoT network as hidden services

Hypothetically, this is just my curiosity: What would be the security implication if some company decides that Tor hidden service is a good way to solve the NAT issue in IoT (that most IoT devices are ...
0
votes
2answers
119 views

is it safe to download Tor browser from other browser

1.i just learnt about Tor, and i'd like to know where is the best place to download Tor browser,i feel downloading from the google play store or another browser might have a negative effect on the ...
0
votes
0answers
38 views

Changing Security Level per site?

I've had quite a few instances browsing .onions that require Javascript to be enabled (protonmail, for example). I don't believe there is a way to configure this directly in Tor browser settings, so ...
1
vote
0answers
62 views

Firefox Multi-Account Containers on Tor

Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
0
votes
0answers
40 views

fix localhost:8080 not connecting but 127.0.0.1 connects

I am currently trying to host my own forum on darkweb with mybb. I have followed LAMP server setup on digital ocean and then it's guide to install mybb. I have changed all the your domain to my onion ...
0
votes
1answer
48 views

Is the Hidden Answers onion service authentic?

I've been wondering if Hidden Answers is legitimate. Can I talk about anything on that forum no matter how unlawful it may sound? Really I want to know if it it has connections to Law Enforcement or ...
0
votes
1answer
76 views

Has Tor Browser stopped displaying circuits?

I started using Tor v4 most intrigued by the display of the circuit path it followed, 4 nodes from at least 2 countries and usually 3 or 4. Now at v9 I don't see it anymore. Has display of the ...
0
votes
0answers
64 views

TOR Security breaking NoScript

Since the last update, when set security is set to "Safest", NoScript in the TOR browser does not show all scripts in the drop down preventing them from being temp allowed. When security is set to "...
0
votes
3answers
61 views

Hardening the network on the host

I’m trying to harden my host to not leak anything to clearnet. I have an idea to get EntryNodes IP addresses from TorProject site, add them to iptables as allowed, and prohibit other traffic. ...
0
votes
1answer
58 views

How secure is it to use Tor on an outdated OSX

Hi :) I'm unable to update my OSX and it needs to be updated. Does the fact that my OSX is outdated make TOR less secure to use?
1
vote
0answers
21 views

Can a router fake the communication to the next nodes on the path?

I have a theoretical question for understanding the safety of TOR: When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do ...
1
vote
0answers
31 views

What is the difference between the fingerprint and v3ident in auth_dirs.c

auth_dirs contains a list of trusted directory authorities and consists of entrys such: "moria1 orport=9101 " "v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 " "128.31.0.39:9131 9695 DFC3 5FFE ...
0
votes
1answer
183 views

Onion site illegal in my country. Can only visiting get me caught?

People hello, When I visit onion website that are illegal inside my country can I get caught if I have highest security setting no java no script and only browse the website? No opening anything? ...
0
votes
1answer
219 views

What makes Onion sites more safe than regular html sites?

What exactly makes an .onion site more secure than a regular html based website, except that it is "hidden" and can't be taken down easily. For a user term, am I more safe when I visit a onion site ...
0
votes
0answers
22 views

Unable to connect Tor browser inside AD client

I'm trying to connect Tor inside the corporate IT network. The workstations are connected through the proxy server and firewall. When the connection failed with 'Connection timeout' error, I tried to ...
0
votes
1answer
84 views

AntiVirus Software - Potential security risk?

I have been wondering is running an Anti-Virus Software with a Firewall brings a security risk with it while using Tor. I recently read about a free Anti-Virus software sold its Users browsing data. ...
0
votes
1answer
96 views

What is more safe - keep network connected or do connect-disconnect

If I need to go away for a while, then should I turn off cable/wifi, or to leave Tails connected? First option looks better because physically disconnected, but multiple connect-disconnect can cause ...
0
votes
1answer
79 views

Is websites/services hosted on tor network safe?

I understand that a server can run services (such as nginx) then listen to localhost, then run Tor Server to create a unique tor address and accept traffic from other Tor Servers into it. My question ...
0
votes
0answers
19 views

How to capture tor cells?

i have been reading in various papers that user is able to caputre tor cell packets and modify some bits or monitor them (RELAYCOMMANDBEGIN,RELAYCOMMANDDATA, RE-LAYCOMMANDEND, RELAYCOMMANDSENDME, RE-...
0
votes
1answer
118 views

Is watching a video less anonymous?

To my understanding of tor security, it works best if all users send short, equal-sized packets (requests, responses) into the tor network. I'm wondering if I'm watching some video which takes quite ...
0
votes
0answers
57 views

How to make proxyxhains act as transparent proxy server

my proxychains is configured to use several proxy server and its work in localhost but i need to route all traffic of other hosts to routed through proxychains-host something link this: my-host <&...
0
votes
2answers
138 views

Does my ISP know if I upload files to a specific site when im using tor/whonix? Can it track all the traffic?

As in the title. I want to know If my ISP can see all the traffic if Its a brand new computer with no cookies and previous activities, using linux and a virtual machine - whonix and tor.
2
votes
1answer
200 views

Can we trust those who control the directory nodes of Tor?

(I feel insecure in my country after the relays I've been using turned out to be state-compromised. Now I'm starting to doubt the integrity of the directory nodes.) Qu: How do we know for sure that ...
1
vote
0answers
36 views

using autentication with torsocks --address

On Linux, I noticed I can run torsocks by specifying --address so that it connects to another computer and use that computer's tor connection, e.g downloading a file over tor: torsocks --address my....
0
votes
1answer
135 views

Tor app. through Google Play

I downloaded the Tor browser app. through Google play, is the app. safe and anonymous even though it's downloaded through Google?
0
votes
1answer
118 views

Does connecting to a normal website using tor work the same way as connecting to a hidden website?

When you connect to a normal website using tor, is the process of connecting to it the same as when you connect to a hidden website? First you connect to the entry node, then middle node then exit ...
0
votes
1answer
55 views

Is there guarantee of privacy to buy onion hosting?

I see many people owning a onion site uses his own server (maybe just place the server in his home?) But traditionally for a regular non-onion site we usually buy hosting. Can I buy hosting for a ...
0
votes
1answer
294 views

Is Tor completely anonymous?

I saw that tor has three layers of encryptions and, plus a VPN I set myself on my computer. How can someone trace back to my real IP? Is this completely anonymous?
3
votes
1answer
326 views

How did the FBI find the IP address of the Freedom Hosting servers?

The FBI took over the Freedom Hosting servers, which were located in France, and arrested the guy (Eric Eoin Marques) running Freedom Hosting. They then proceed to serve malware to anyone who ...
1
vote
0answers
57 views

File Quarantined by Anti-Virus Software from the Latest Upgrade of Tor Browser

I upgraded to the lastest version of Tor browser 9.0, and my antivirus software 360 Safeguard reported the file nssdbm3.dll being infected by trojan win32/Trojan.7be Could anybody tell me if this is ...
0
votes
2answers
120 views

TOR questions and concerns

1) ISPs request bridges and blacklist them, that means obfs4 connections could be listed as Tor, does that mean the ISP is able to see the obfs4 IP and connect your activities to Tor just like ...
0
votes
2answers
153 views

Can a onion domain I register be discovered if I don't make it public?

This tutorial teaches how to register a hidden service and point it to a server's SSH port, so that we can keep this port closed on the open Internet and acess it from inside Tor network. Of course ...
0
votes
1answer
168 views

snap and apt usage to install the tor browser bundle?

Not to put too fine a point on it, but neither snap nor apt are suitable for installing current versions of the tor browser? I see the downloads are available directly from the tor site.
0
votes
1answer
48 views

During installation of the Tor browser a unique asymmetric key pair is created and stored. Is this stored on the HDD/SSD and used repeatedly?

I would like to know where the unique asymmetric key pair is stored following installation of the Tor browser. Is it stored in the HDD/SSD and used repeatedly or in RAM and changed for each browsing ...
1
vote
1answer
102 views

Multiple outgoing connections from Tor browser

I see a lot of unknown outgoing connections from tor.exe to different IP addresses (about 6-7) every time Tor browser first connects to Internet after its installing. Only Tor entry guard remains with ...
0
votes
0answers
25 views

Windows update/fix ad while using TOR on youtube

I was using TOR yesterday (July 21, 2019) and received one of those ads right over the music video I was watching on youtube. This ad definitely looked like a scam - it would probably have downloaded ...
2
votes
1answer
872 views

Tor public key Provided object is too large

I try to import Tor browser public key like this gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290 but I get error pubring.kbx': Provided object is too large I use debian ...
0
votes
2answers
319 views

Cash from the dark net?

Are any of these credit card sites and cash sites real? I'd love to know some of them because I've been scrolling through websites and all I see is scam scam
2
votes
1answer
71 views

setting the security slider to medium

It says that setting the security slider of the torbrowser to medium disables the function which is dangerous. I would like to know what features are considered dangerous and why. And if I set the ...

1
2 3 4 5
10