Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0
votes
1answer
2k views

Using Paypal with Tor---Ooopsy!

I made the mistake of trying to pay for a VPN service with Paypal while using Tor browser. Paypal said the transaction had gone through. But my bank statement said otherwise. I haven't validated the ...
2
votes
1answer
425 views

Why do entry nodes not know the originator?

I stumbled upon the following text in the article about onion routing on Wikipedia: In this example onion, the source of the data sends the onion to Router A, which removes a layer of encryption ...
2
votes
0answers
291 views

HiddenServiceAuthorizeClient: Difference between 'basic' and 'stealth'? [duplicate]

http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html#HiddenServiceAuthorizeClient The auth-type can either be 'basic' for a general-purpose authorization protocol or 'stealth' for a less scalable ...
0
votes
1answer
1k views

What is more secure: Tails or Subgraph? [closed]

What is more secure: Tails or Subgraph? (Subgraph has a live CD/USB option making it like Tails)
2
votes
0answers
180 views

Building an Apparmor Profile

I generated an apparmor profile for the tor binary that comes bundled in Ricochet: # Last Modified: Sun Apr 2 2017 #include <tunables/global> /ricochet/*-ricochet/tor { #include <...
2
votes
1answer
178 views

Does Tor prevent people from finding the sites you visited before dowloading Tor, or does it only block your history after downloading Tor?

The title is my question--does Tor block access to your internet browsing history before you download Tor, or does it block access to your internet use after downloading Tor?
2
votes
2answers
132 views

Does all bridge users have the same encryption key?

When I connect to a bridge is my encryption key the same as the encryption key for all other users to the same bridge or does the encryption key differ from one user to another for that same bridge? ...
1
vote
1answer
295 views

cant see the https\\ when trying to open tor market places such as dream market? [closed]

Apologies to all, I'm a complete novice.. From what i have read and my understanding is that one must see the https\ before the name of the website to know it was totally "safe" or.... "secure" would ...
0
votes
1answer
620 views

High Security Settings for All sites

What is the main disadvantage(s) of using High security settings as default/all the time if you are mainly using Tor for reading purposes only.(Mostly texts) Mainly the issue I only see is font ...
0
votes
1answer
68 views

Attacks from client-side, & server protections

Just as a hypothetical attack, assume Eve is using TOR. But Eve wishes to take control of the TOR nodes, and so injects a malicious package into the packets she sends to her TOR relay that takes over ...
1
vote
1answer
550 views

How does the Tor Circuit Map works?

I always wondered how Tor knows all the nodes in the connection path when the Tor Browser connects to a server. I though that the idea behind the onion routing was to hide nodes from each other, so ...
2
votes
1answer
1k views

Does tor hide traffic from DNS servers? [duplicate]

I am wondering if when using Tor my requests are hidden from my DNS servers. For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing? I am ...
1
vote
1answer
279 views

Hiding Tails on USB drive

How can I hide the Tails software on my USB stick ? I have no idea to do so. I use it, but I'm no developper.
0
votes
2answers
500 views

Setting a usa IP address TAILS/ TOR [duplicate]

I need to set TAILS/ TOR to an IP address that resides in the USA. I do not know how to do this. Thank you!
0
votes
2answers
401 views

Difference of Tor Browser and Firefox version

When using Tor Browser I see that the Tor Browser and Firefox versions differ. The current version of Tor Browser (based on firefox) is 45.7.0 The current version of Firefox is 51.0.1 Why doesn't ...
0
votes
1answer
77 views

THE AUTHENTIC TOR? [duplicate]

Could there be such a thing as an "imposter" Tor? Could anyone mistakenly download an "imposter" version of Tor? Thank you, Tomadeus
1
vote
3answers
379 views

Tails and OnionShare

Tails 2.10 includes the OnionShare software for the first time. While experimenting with OnionShare I discovered that I could share files on my desktop. That surprised me. TorBrowser was hardened so ...
1
vote
3answers
355 views

Infected tails dvd

if a RAT hits my computer and it is NOT the kind that can write to firmware, and I am using my tor tails livecd, and I have no HDD installed on the computer, can this kind of (non-firmware writing) ...
1
vote
1answer
4k views

Tails/Tor Browser not connecting to the internet

I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion ...
1
vote
3answers
216 views

Can the tor initial client to relay or bridge connection be MITM attacked?

I am not an expert in Wireshark but I was looking at some packets through Wireshark. I noticed that when using a relay that the connection to the directory authority the first few TCP packets such as ...
1
vote
1answer
88 views

Does running a relay expose my IP and make me vulnerable to attacks?

I'm running a non exit relay, but I am slightly concerned. My relay information is listed on the Atlas, along with my IP Address. Is this safe? Doesn't it make me an easy target for getting ddosed?
0
votes
2answers
325 views

Does Tor address the excessivity of cookies websites post on the browser?

I have not found anything anywhere that addresses the excessivity of cookies, including Third Party cookies, that are presently being posted by websites into connecting browsers. This is primarily ...
1
vote
2answers
426 views

TAILS - LIVECD & RATs

If i have a RAT on my computer, obviously, they have control over the computer when I am in win 10 os, for ie. But what about if after the RAT has infected the host os, I use a LIVECD. QUESTION: When ...
0
votes
1answer
292 views

How often should the bridges list that is downloaded be replaced? [duplicate]

Are they changed, and is there a recommended time to change them?
0
votes
3answers
249 views

Running a Tor relay and make it secure

I was considering about running a relay to help the Tor community. But I was wondering what's happening if someone using the Tor network to access illegal websites (such as pedophile websites). Do I ...
1
vote
0answers
76 views

How can I set the firewall rules on Iptables without them getting deleted?

I am sending command line commands to the Iptables. Once I set these rules I connect to my router. on connecting all the rules I just add is removed and only the original firewall rules that tails has ...
1
vote
1answer
229 views

Tor's encryption confusion and client to first node encryption

From what I've read the onion routing process goes like this: The client encrypts its traffic to the destination server and sends it to the first node (encrypted); The fird node encrypts it again and ...
0
votes
3answers
544 views

Unknown Connections In Netstat

I have not ran TOR since turning on my computer hours ago. I occasionally netstat my CPU to make sure there is no unknown connections/phoning home/root kits. I ran the following command: sudo ...
0
votes
1answer
197 views

is it safe to browse in other browser while using TOR browser? [duplicate]

I'm a new user so I wanted to confirm if browsing simultaneously on some other browser will affect my security .
0
votes
1answer
230 views

how I use tor on windows phone?

since the wifi that I am using does not allow me even to connect to my vpn, the only way that I have to visit facebook etc. is surfing with Tor browser, as I do on my laptop. Is there a way to use the ...
1
vote
1answer
3k views

Why is the “administrator” password not saved in Tails?

I can use any password to be administrator for each particular session [as long as I type it twice], at Tails boot. That seems like a g a p i n g security hole if an adversary were to get/have access ...
1
vote
1answer
495 views

Can I prevent Tor from building single-hop circuits?

Despite the manual's declared defaults [below], Onion Circuits shows single hop circuits being "Built" by Tor. So I have edited my torrc to specifically include ExcludeSingleHopRelays 1 and ...
0
votes
1answer
308 views

Is there any vulnerabilities when using socks with tails?

In the tor manual under socks port it states “The SOCKS protocol is unencrypted and (as we use it) unauthenticated” Does the socks protocol used in the loop back interface only or does the Socks ...
1
vote
1answer
79 views

What is the purpose of the nat ipables rules in Tails netfilter?

I had a look at the iptables rules from Tails OS Briefly speaking, what is the purpose of the lan iptables rules? Chain lan (3 references) target prot opt source destination ...
1
vote
2answers
281 views

Can I sent ip and port combination when I connect to the tor network?

I would like to set my source port when I connect to the tor network. I know that the destination port is set irrespectively if you use a bridge or node to connect for out bound traffic. I would like ...
0
votes
1answer
113 views

ZeroDay exploits and how do we stay safe from them

Tor is a browser that guarantees anonymity if used properly. But today I stumbled upon a piece of code which is claimed to be a Zero day exploit for Tor browser. It can be located by the following ...
1
vote
1answer
292 views

Yandex claims there's a virus [duplicate]

:-) When trying to open my Yandex account it won't let me open the site. It says: "403 Access to our service has been temporarily blocked. Your computer may be infected with a virus, which is sending ...
0
votes
1answer
176 views

Some sites seem to disable the protection by themselves, how can I prevent that?

When I visit some specific sites e.g. www.youtube.com or https://www.vliegtickets.nl, two things happen: The menu item for 'temporarily allow all this page' disappears The HTTPS connection is marked ...
0
votes
1answer
80 views

After Downloading and Installing Tor My E-Mail Program is Drastically Slow

After Downloading and Installing Tor My E-Mail Program is Drastically Slow ... I am using Windows - 7 and Outlook 2013. Earthlink.net is my e-mail server. Prior to downloading and installing TOR, my ...
0
votes
1answer
160 views

Can't launch hardend browser with Grsecurity

Can somebody explain to me, what's up with tor-browser-hardened and Grsecurity? I can't launch hardened browser on Grsecurity hardened kernel. Even after applying paxctl -cpemrxs to Browser/firefox ...
1
vote
1answer
79 views

How to verify that my ISP is not running a fake tor subnetwork

It seems very easy for my ISP to firewall all tor nodes and redirect all connection to a fake tor node or network of fake tor nodes. How can I make sure it is not the case?
0
votes
2answers
490 views

Routing Bittorrent through a Tor relay…

I am running a non-exit Tor relay on my Windows 10 machine. I have the ORPort as 443, while the SocksPort and ControlPort are 9050 and 9051, respectively. I devote 800 Kbps average, and 950 Kbps to ...
1
vote
1answer
374 views

Getting XML parsing error in tor. Is my tor compromised?

while browsing a website using tor i got the error as shown in image. I was shocked because error shows my name and path in my system. Is the above error something to be worried about or is it ...
0
votes
1answer
113 views

Addon/plugin “Unplug”, is it safe? [duplicate]

I tried the add-on named "Unplug", it works fine. But is it safe to use the "Unplug" add-on within Tor to catch streaming ? Thanks.
0
votes
2answers
966 views

Can this anonymous email be traced back to me?

I used TOR browser and guerillamail to send an email anonymously (or so I think). Is there any way this can come back to me? I used my own laptop on my home wifi network. I just opened Tor, did some ...
1
vote
1answer
110 views

Root access in Tor 6,0.5?

25/9/2016 Bonjour tout le monde, While launching Tor 6,05 as standard user, I check the connexions and noticed these lines : tcp 0 0 localhost:58186 localhost:ipp ...
0
votes
1answer
45 views

More information on how Tor works [closed]

How do I know Tor is working on my device? Is there any way I can know that my whatsapp is routed via Tor?
0
votes
1answer
94 views

Anonymity considerations of HTTP referer field [duplicate]

I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I ...
2
votes
1answer
594 views

Is it safe to use Tor with Malwarebytes Anti-Exploit?

I have Malwarebytes Anti-Exploit on my system. Is it safe to use it with Tor?
1
vote
1answer
152 views

Additional Tor security at the client's network perimeter

I have been studying Tor and its related security issues recently, and have some questions. Aren't the most effective recent attacks on Tor, actually attacks on the browser (or plugins), rather than ...