Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0
votes
2answers
3k views

How to configure Tor Browser to run securely?

A couple of months ago, I was looking at a youtube video and there were some steps to make Tor secure. For example it was suggested that the users should check that pop up windows are blocked, choose ...
0
votes
1answer
2k views

Password protecting the Tor browser

I'd like to password protect the Tor browser on my computer so that others cannot open it without a password. Is there a simple way of doing so? I am on a Mac using OSX. So far, I'm thinking the best ...
1
vote
2answers
2k views

Where can I find the new Tails 3.2 checksum?

I'm looking for the new Tails 3.2 checkums (md5, sha1, sha256, etc). It seems that there is no way to find it in its own site. Even googling it brings not much information. So there is something I'm ...
0
votes
1answer
556 views

Socks version 22 not recognized. (Tor is not an http proxy.)

Hello everyone. i have a simple question i am using a tor client to connect programmatically to tor via Socks4a. Everything run smoothly but when i tried to add ssl-tls to connect to localhost i got ...
0
votes
1answer
745 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
1
vote
2answers
4k views

asstr.org being redirected (hijacked) to russian website awe-kyle.ru over TOR?

When using a tor browser to connect to asstr.org an unexpected message shows in the browser: Come visit us at https://www.asstr.org/ to read this story and hundreds of thousands of other works! ...
2
votes
2answers
582 views

Is it save to use Bitcoin over Tor?

Is it safe to make payments with BTC etc. over Tor? Is it safe to use web wallets (https)? Is it safe to use desktop wallets (Electrum)? Could exit node operators steal my login credentials or my ...
1
vote
0answers
43 views

Is the default low security level dangerous? [duplicate]

The default level is set to low which ensures compatibility with most sites and technology but is it dangerous for security and/or for anonymity?
0
votes
1answer
64 views

Should my orport be public facing?

I port scanned my VPS (tor relay) and noticed both port 9001 and 9030 are public facing; accessible to the entire internet. Is this normal? How might a malicious actor interact with these ports? Could ...
0
votes
1answer
230 views

Is it in this case still safe to use Tor

My Macbook Air is to old to use the newer versions of Tor. Is it in this case still safe to use the older Tor version, or do I really have to buy a new computer to use Tor safely?
1
vote
1answer
112 views

NoScript has disabled Ublock's scripts

For some time now NoScript has disabled all Ublock's scripts. I have not this problem on Firefox. The scripts only work when I put Tor on low level of security. Can I put it on high level and do this: ...
0
votes
1answer
922 views

Your connection is not secure should I add exception

For some time I have been using a site with no problems, as of yesterday I get this: Your connection is not secure The owner of website.net has configured their website improperly. To protect your ...
0
votes
3answers
362 views

Ddos attack on router

Will running Tor help defend against a ddos attack on my router? Will Tor help hide my IP address and keep me online during a ddos attack?
0
votes
1answer
556 views

Malware detection when installing tor browser

maybe its wrong here, if so, i´m sorry. I tried to install the very first time tor browser for windows german version: torbrowser-install-7.0.4_de from your website https://www.torproject.org/projects/...
2
votes
2answers
1k views

How can one avoid Tor correlation attacks?

People usually recommend either using a VPN or hosting an entry or exit node in a remote server. But what about proxies and bridges, for example? And are there any other way to avoid correlation ...
0
votes
1answer
286 views

typical way to run tails virtualized on ubuntu?

To run on Ubuntu just use KVM to run tails? If you are a bit lazy like me, the idea to reboot your system seems inconvenient. But with the help of QEMU there is an easy to use alternative ...
3
votes
1answer
249 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
1
vote
0answers
3k views

How to enable javascript in tor browser 7.0.2 [closed]

How do i enable java script on tor browser 7.0.2 so i can see a captcha when signing into a site? I have tried to go into content but there is no option to turn it on/off i have also tried to allow no ...
1
vote
1answer
52 views

What do ORs 'know'?

It is often said that each node 'knows' the preceding and proceding nodes. But what identification information does the node have exactly? Just the IP address? Also, as a result of what protocol does ...
0
votes
1answer
164 views

IP address and staying anonymous?

What identification information does Tor strip besides IP addresses? I realize that, by filtering through ORs, my IP address is no longer identifiable. But what other ID information, besides the data ...
1
vote
0answers
136 views

Hacking Tor in my spy/thriller novel

Question: What are plausible circumstances in which one could hack an individual Onion Router to discover the location of the previous router? Reason: I’m an aspiring writer, working on a spy-...
0
votes
1answer
125 views

Hacking Tor through RAM

Is it possible to identify the middle router by extracting data from the RAM of the exit router?
1
vote
1answer
109 views

Data saved in Onion Routers

I’m an aspiring writer, working on a spy-thriller novel with Tor as part of the plot. Is it hypothetically possible to hack an individual Onion Router to discover the location of the previous router? ...
1
vote
1answer
352 views

A server behind a physical Tor gateway to hide its location

Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access? In my world-...
1
vote
0answers
141 views

How to learn Kali anonymously? [closed]

I want to learn Kali, but wanna do this anonymously ? I want to register on vulnhub and learn Kali solving the CTF, but in same time I want to remain anonymous to vulnhub, in Kali and while ...
0
votes
1answer
94 views

security problem?

I have two versions of TOR on my PC. If I use the one that has security settings at medium - so I can log in here for example - I am getting a continual stream of something from this site: www.cyber-...
1
vote
1answer
271 views

Do physical security keys work with tor (specifically google products)

So I've recently been considering buying a physical security key (specifically this one) and was wondering if I could get it to work with tor seeing as the google support article on physical keys for ...
1
vote
1answer
48 views

Extra security for private forum posts

I'm a complete newby to anything like Tor so please excuse if this is an ignorant question. We're looking for a way to have a private forum that members can't copy and paste, take screenshots of or ...
1
vote
0answers
276 views

Does running multiple Tor instances with multiple exit nodes this way really compromise Tor security?

I have followed steps in this article and could successfully run two tor instances with different exit nodes (IPs duplicate if more than 2 nodes are used) and checked Tor status using following sites ...
0
votes
1answer
211 views

SSL between onion and web server

I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
1
vote
0answers
58 views

NoScript settings by default have Allow Scripts Globally (dangerous) ticked [duplicate]

I noticed that on occasion my browser has this opened by default when opening Tor Browser bundle and wont allow the appearance tag to work when I select options, but instead doesn't show any. In some ...
2
votes
1answer
565 views

Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation? [closed]

In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that ...
0
votes
1answer
3k views

Using Paypal with Tor---Ooopsy!

I made the mistake of trying to pay for a VPN service with Paypal while using Tor browser. Paypal said the transaction had gone through. But my bank statement said otherwise. I haven't validated the ...
2
votes
1answer
488 views

Why do entry nodes not know the originator?

I stumbled upon the following text in the article about onion routing on Wikipedia: In this example onion, the source of the data sends the onion to Router A, which removes a layer of encryption ...
2
votes
0answers
352 views

HiddenServiceAuthorizeClient: Difference between 'basic' and 'stealth'? [duplicate]

http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html#HiddenServiceAuthorizeClient The auth-type can either be 'basic' for a general-purpose authorization protocol or 'stealth' for a less scalable ...
0
votes
1answer
1k views

What is more secure: Tails or Subgraph? [closed]

What is more secure: Tails or Subgraph? (Subgraph has a live CD/USB option making it like Tails)
2
votes
0answers
217 views

Building an Apparmor Profile

I generated an apparmor profile for the tor binary that comes bundled in Ricochet: # Last Modified: Sun Apr 2 2017 #include <tunables/global> /ricochet/*-ricochet/tor { #include <...
2
votes
1answer
193 views

Does Tor prevent people from finding the sites you visited before dowloading Tor, or does it only block your history after downloading Tor?

The title is my question--does Tor block access to your internet browsing history before you download Tor, or does it block access to your internet use after downloading Tor?
2
votes
2answers
155 views

Does all bridge users have the same encryption key?

When I connect to a bridge is my encryption key the same as the encryption key for all other users to the same bridge or does the encryption key differ from one user to another for that same bridge? ...
1
vote
1answer
313 views

cant see the https\\ when trying to open tor market places such as dream market? [closed]

Apologies to all, I'm a complete novice.. From what i have read and my understanding is that one must see the https\ before the name of the website to know it was totally "safe" or.... "secure" would ...
0
votes
1answer
655 views

High Security Settings for All sites

What is the main disadvantage(s) of using High security settings as default/all the time if you are mainly using Tor for reading purposes only.(Mostly texts) Mainly the issue I only see is font ...
0
votes
1answer
75 views

Attacks from client-side, & server protections

Just as a hypothetical attack, assume Eve is using TOR. But Eve wishes to take control of the TOR nodes, and so injects a malicious package into the packets she sends to her TOR relay that takes over ...
1
vote
1answer
718 views

How does the Tor Circuit Map works?

I always wondered how Tor knows all the nodes in the connection path when the Tor Browser connects to a server. I though that the idea behind the onion routing was to hide nodes from each other, so ...
2
votes
1answer
1k views

Does tor hide traffic from DNS servers? [duplicate]

I am wondering if when using Tor my requests are hidden from my DNS servers. For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing? I am ...
1
vote
1answer
356 views

Hiding Tails on USB drive

How can I hide the Tails software on my USB stick ? I have no idea to do so. I use it, but I'm no developper.
0
votes
2answers
606 views

Setting a usa IP address TAILS/ TOR [duplicate]

I need to set TAILS/ TOR to an IP address that resides in the USA. I do not know how to do this. Thank you!
0
votes
2answers
417 views

Difference of Tor Browser and Firefox version

When using Tor Browser I see that the Tor Browser and Firefox versions differ. The current version of Tor Browser (based on firefox) is 45.7.0 The current version of Firefox is 51.0.1 Why doesn't ...
0
votes
1answer
90 views

THE AUTHENTIC TOR? [duplicate]

Could there be such a thing as an "imposter" Tor? Could anyone mistakenly download an "imposter" version of Tor? Thank you, Tomadeus
1
vote
3answers
439 views

Tails and OnionShare

Tails 2.10 includes the OnionShare software for the first time. While experimenting with OnionShare I discovered that I could share files on my desktop. That surprised me. TorBrowser was hardened so ...
1
vote
3answers
359 views

Infected tails dvd

if a RAT hits my computer and it is NOT the kind that can write to firmware, and I am using my tor tails livecd, and I have no HDD installed on the computer, can this kind of (non-firmware writing) ...

1 2
3
4 5
9